GENERALIZED EXPLICIT DESCENT AND ITS APPLICATION TO 

CURVES OF GENUS 3 



NILS BRUIN, BJORN POONEN, AND MICHAEL STOLE 

Abstract. We introduce a common generalization of essentially all known methods for 
explicit computation of Selmer groups, which are used to bound the ranks of abelian varieties 
over global fields. We also simplify and extend the proofs relating what is computed to the 
cohomologically-defined Selmer groups. Selmer group computations have been practical for 
many Jacobians of curves over Q of genus up to 2 since the 1990s, but our approach is the 
first to be practical for general curves of genus 3. We show that our approach succeeds on 
some genus-3 examples defined by polynomials with small coefficients. 



1. Introduction 

1.1. Background. The Mordell-Weil theorem |Mor22irWei29] states that for any abehan 
variety J over a number field k, the abehan group J{k) is finitely generated. One of the 
main steps of the proof involves showing the finiteness of J{k)/nJ{k) for some n >2. And 
there is essentially only one known proof of this finiteness, based on a vast generalization of 
Fermat's method of infinite descent. In modern terms, the proof embeds J{k)/nJ{k) into a 
Selmer group SeP(J), a finite group that is computable in principle. 

But the Selmer group is defined as a subgroup of a Galois cohomology group H^{k, J[n]), 
and 1-cocycles for the absolute Galois group Q oik are not objects that a computer can deal 
with directly. Fortunately, sometimes one can find more concrete representations for elements 
oi H^{k, J[n]). For example, if J is an elliptic curve with J[2] C J{k), then J[2] is isomorphic 
to fi2 X fJ'2 as ^-module, and the Kummer sequence yields H^{k, J[2]) ~ k^ /k^"^ x k^ /k^"^. 

In many higher-dimensional situations, however, the number field over which all the points 
of J[n\ become rational is too large for the required computations. Instead one tries to find 
exact sequences relating J[n\ to modules induced from 'LjnL or since cohomology of 
induced modules can be computed by Shapiro's lemma |AW67l §4, Proposition 2]. For 
example, if J is the Jacobian of a hyperelliptic curve = f{x) with deg/ odd, and A is 
the ^-set of Weierstrass points not including the one at infinity, then elements of J [2] are 
represented by degree-0 divisors supported on AU{oo}, and we obtain a spht exact sequence 
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in which (Z/2Z)^ is a direct sum of induced modules: this was exploited in |Sch95] . For 
y"^ = f{x) with deg/ even, there is still a relationship between J[2] and induced modules, 
but it is more involved, and it becomes much harder to relate H^{k, J[2]) to concrete objects: 
this problem, together with its generalization to = f{x) for larger primes p, was addressed 
in |PS97j . The situations of the two previous sentences were called true descent and fake 
descent, respectively, in |PS97] . 

1.2. Goal of this article. The main goal of this article is to develop a practical generaliza- 
tion of true and fake descent that contains essentially all previous instantiations of explicit 
descent. Our generalization is broad enough to suggest an explicit approach for Jacobians 
of arbitrary curves, using the ^-set of odd theta characteristics. We demonstrate its practi- 
cality by computing the rank of J(Q) for the Jacobian of a non-hyperelliptic curve genus-3 
curve X with no special property beyond having small discriminant: see Section [12.9. II This 
is the first time that Selmer group computations for "general" genus-3 Jacobians have been 
possible. 

Remark 1.1. Practical Selmer group calculations rely on the computation of class groups of 
number fields, and this is usually the bottleneck, except in situations where the ^-action 
on certain torsion points is much smaller than expected for a general curve. For a general 
genus-3 curve over Q, our method requires the class group of a number field of degree 28; this 
seems to be the smallest possible, given that 28 is the smallest index of a proper subgroup 
of Spg(F2). For general genus-4 curves, the corresponding index is 120, which is likely to 
remain outside the realm of practical computation for some time. 

We do not only generalize the arguments of |PS97] : we also simplify them. Specifically, 
our new approach of taking Cartier duals before taking cohomology (Sections l6.2.2l and l6.3.ip 
lets us eliminate the use of generalized Jacobians and the group scheme J7m in |PS97j . Thus 
we now have a better understanding of explicit descent even in the case of hyperelliptic 
curves. 

Remark 1.2. For certain Jacobians J, there is also a representation-theoretic approach to 
understanding J[2] and its Galois cohomology, based on Vinberg theory, whose relevance 
for arithmetic problems was first pointed out by Benedict Gross. Namely, Jack Thorne has 
shown very generally how, starting from a simple split algebraic group G of type A, D, 
or E over a field k of characteristic 0, one can produce a family of curves for which J[2] can 
be identified with the stabilizers for an action of the subgroup fixed by an involution 6 
in a particular canonical G'^*^(fc)-conjugacy class of involutions of G, and from this one 
can obtain information about H^{k, J[2]). In particular, when G is of type Eq (resp. Ej), 
Thome's construction yields the universal family of non-hyperelliptic genus-3 curves with a 
marked hyperfiex (resp., a marked flex that is not a hyperfiex). See |Thol2] : the families 
of genus-3 curves appear explicitly in Theorem 4.8 there. In the Eq case, Gal{k{J[2]) / k) is 
generically W{Eq), isomorphic to an index-28 subgroup of the group Spg(F2) that arises for a 
general genus-3 curve. In the Ei case, Gal(fc(J[2])//c) is generically W (Ey) / {±1} , isomorphic 
to the full group Spg(F2). It is reasonable to hope that it will eventually be possible to use 
Thome's work to study Sel^(J) for any non-hyperelliptic genus-3 curve with a rational flex. 

1.3. Road map to the rest of the article. The first few sections are preliminary. Sec- 
tion [2] introduces the notation to be used throughout the rest of the article; much of it is 
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standard. Section |3] introduces twisted powers, a slight generalization of induced modules 
and permutation modules. Section H] uses Lang reciprocity to relate various definitions of 
Weil pairings. Section |5] reviews and develops the combinatorics of theta characteristics on 
a curve. 

Section E] is the heart of the paper. First it axiomatizes the settings to which our explicit 
approach applies, formalizing them into the notions of true descent setup and fake descent 
setup, which are general enough to handle various isogenies (p: A J over a global field k. 
Given a true descent setup, we define a homomorphism 

J(k) L"" 



xn 



' ' (f)A{k) L> 

that acts as a computation-friendly substitute for the connecting homomorphism 

(2) J^^^HHt,Am 

appearing in the definition of the actual 0-Selmer group. In fact, the homomorphism ([1]) 
can be defined in two ways, either by using cohomology (good for comparing it to the ho- 
momorphism ([2]) used to define the actual 0-Selmer group) or by evaluating explicit rational 
functions on 0-cycles (good for computing the homomorphism). Using our work on Weil 
pairings, we prove that the two definitions agree. A more complicated argument establishes 
compatibility of analogous definitions for a fake descent setup; here L^/L^" is replaced by 

Section[7]identifies the computation- friendly analogue of the subgroup of classes in H^{k, A[(f)]) 
unramified outside a finite set of places, which is essential for making the computations fi- 
nite. Section [9] defines a computation-friendly analogue of the 0-Selmer group, called the 
true or fake Selmer group, and defines an analogue for a variety X whose Albanese variety 
is J. Section [TU] uses the notion of Shafarevich-Tate group from Section [S] to prove results 
that often enable one to pass from knowledge of the true or fake Selmer group to the actual 
0-Selmer group. A more elaborate method that always succeeds in calculating the 0-Selmer 
group is presented in an appendix, but in some situations it may be impractical. 

Section [11] provides details on how to compute true and fake Selmer groups. Section [12] 
specializes the approach to the case of non-hyperelliptic genus-3 curves, and ends with several 
examples. 

2. Notation 

If is a set and n G Z>o, let (^) denote the set of n-element subsets of 5*. For each field fc, 
choose a separable closure kg (compatibly, when possible), and let Q = Qk = Ga\.{ks/k). In 
general, for an object X over fc, we denote by Xs its base extension to kg- If is a global 
field, let VLk be the set of nontrivial places of k. For v G VLk, let k^ be the completion of k at v; 
if moreover v is non-archimedean, let be the valuation ring in k^, let be the residue 
field, and let k^^u be the maximal unramified extension of k^ inside a separable closure k^^s- 
All ^-sets and ^-modules are given the discrete topology, and the ^-action is assumed to 
be continuous. If M is a ^-module, then or M{k) denotes the subgroup of ^-invariant 
elements, and H"{M) or H^{k,M) or H"'{Q,M) denotes profinite group cohomology. 

If X is an integral /c-scheme, then k{X) is its function field. More generally, if X is a 
disjoint union of integral fc-schemes Xi, let k{X) be the product of the k{Xi); equivalently, 
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k{X) is the ring of global sections of the sheaf of total quotient rings (see |Har77l p. 141]). 
Let ^ = Gx be the structure sheaf. 

Call a variety nice if it is smooth, projective, and geometrically integral. Curves will be 
assumed nice unless otherwise specified. For a nice variety X, let DivX (resp. Div^X) be 
the group of divisors (resp. divisors algebraically equivalent to 0) on X over fc, let ZiX^ 
(resp. Z°(X)) be the group of 0-cycles (resp. 0-cycles of degree 0), and define PicX as in 

[Har77l II. §6]; if X is a curve, also define Pic°X := ker(PicX *^ Z). Alternatively, if 
PrincX is the group of principal divisors, then PicX = DivX/PrincX. If / G A;(X)^ and 
z = ^ npP G 2(X) is such that no closed point P appearing in 2; is a zero or pole of /, let 
/(-^) = X\p{^k{P)ikJ{P)T^ G fc^. Let J := Albx be the Albanese variety of X, so J is an 
abelian variety. Then the Picard variety of X (i.e., the reduced subgroup scheme associated 
to the connected component of the Picard scheme of X/ /c) may be identified with the dual 
abelian variety J. If X is a curve, then both J and J are the Jacobian JacX. Let y*^(X) 
be the kernel of the natural map ^°(X) — )■ J(/i;), and let J{}i)o be the image of this map. 
More generally, if G is a subgroup of J(A;), let {J{k)/G)o be the image of Z^{X) J{k)/G. 

3. Twisted powers 

Fix a field k. 

Definition 3.1. Given a ^-module M, and a finite ^-set A, the twisted power is the 
^-module of maps from A to M. 

Remark 3.2. The ^-action on maps is the usual one: if cr G ^ and P h-)- mp is an element 
m G M^, then '^m is the map P ^ a{m^~ip). 

Remark 3.3. Applying the construction to Z with trivial action yields Z^. Then = 
Homz(Z^,M) for any ^-module M. 

Remark 3.4. If G is a commutative group scheme over k, we also use G to denote the Q- 
module G{ks), and define G^ (at least as a ^-module). Similarly, a finite etale /c-scheme A 
can be identified with a finite ^-set. 

Definition 3.5. If M is a ^-module and A is a finite ^-set, there is a homomorphism 
deg : M that sums the coordinates, and we let M^^q be its kernel. 

Definition 3.6. Given a finite ^-module M of size not divisible by char /c, the Cartier dual 
of M is the ^-module := B.omz{M, k^). (This is compatible with the notion for finite 
commutative group schemes.) 

Remark 3.7. For fixed A, the functor M 1— )■ is exact. 

Remark 3.8. For a finite ^-module M of size not divisible by char/c, and a finite ^-set A, 
we have (M^)^ ~ (M^)^. 

Each finite etale /c-scheme A is SpecL for some etale /c-algebra L. Define the etale kg- 
algebra Lg := L 0^ kg- Thus G^{k) = L and G'^{ks) = Lg. Assume charfc \ n. Then 
Uni^s) = f^n{Ls). The group H^{G^) = H^{Q, L^) is trivial by a generalization of Hilbert's 
theorem 90 [5eFf9l p. 152, Exercise 2], so H\fi^) = L^/L^". 
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4. Weil pairings 



Let k he a field. Let n be a positive integer with char k \ n. 

4.1. The Albanese-Albanese definition. In this section we review Lang's construction 
of the Weil pairing between Albanese varieties. Let V and W be nice /c-varieties and let 
D G Div(\^ X W). The divisor D induces partial maps 

D : Z°{Vs) Div° Ws and 2)* : Z^{Ws) Div° V^. 

Summation of 0-cycles in Alhy{ks) gives rise to the exact sequence 

^ 3^°(K) ^ 2'{Vs) ^ A\hv{h) ^ 0. 

By [Lan83l III, Theorem 4, Corollary 2], D(3^°(K)) C Princly,. In particular, if w e Z°(K) 
maps to an n-torsion point [v] G Albv[?T.](fcs), then nv G 3^°(K), and D{nv) = div(/„„) for 
some fnv G ks(W)^ . Define G kgiV)^ symmetrically. Define 

eD,„: A\hv[n]{ks) x Albiy[n](/cs) ^ /in(^s) 



where v G -E°(V^) mapping to [v] and G Z^{Ws) mapping to [w] are chosen so that the 
evaluations make sense. See |Lan83t VI, §4] for the proof that ej),„ is well-defined, bilinear, 
and Galois-equivariant. 

Remark 4.1. Let A be an abelian variety, let A be the dual abelian variety, and continue to 
suppose that char k \ n. Take V = A and W = A, and let 2) be a Poincare divisor. Since 
AVoa = A and Alb^ = A, we obtain a pairing Cn'- A[n] x A[n\ — )■ It is nondegenerate 
(see [Lan831 VI, VII]), so we obtain an identification of A[n] with A[n]^. 

4.2. The Albanese-Picard definition. Let X be a nice /c-variety. Let J := Albx- Let ^ 

be a Poincare divisor in Div(J x J). Fix a base point in Xg to obtain a map l: Xg — )■ J^. 
The functoriality of taking Albanese varieties yields L{y^{Xs)) C y^{Js)- Define • = 
(t X idj)*^ G Div(X, X J,). If y G 3^°(A,) and z G 2°(J.), then ^o(l/) (if defined) is the 
divisor of some rational function on Jg, which can be evaluated on z (if the supports are 
disjoint) to obtain a value ''^Q{y,z) G k^ . Given D G Div°(As), we may find z G Z'^{Js) 
summing to [D] G Pic^^Xg) = Js{ks), which means that D — *Po(-^) ~ '^^^{9d,z) for some 
gD,z £ ks{X)^ , and we obtain a partially-defined pairing 

[, ]: y%X,) X Div°(A,) ^ kf 

y , D gD,z{y)^oiy^^) 

See |PS99t Section 3.2] for a proof that this pairing is independent of the choices made, using 
Lang reciprocity and the seesaw principle, li g E ks{X)^, then [y, div(5f)] = g{y) since the 
choice z = yields gD,z = 9- 
Finally, define 

ex,n- J[n] X J[n] ^in{ks) 
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where x E Z^{Xs) represents an element of J[n]{ks), and D E Div^ Xg represents an element 
of J[n]{ks), and fnD ^ ks{X)^ has divisor nD, and all these are chosen so that everything is 
defined. 

Let us check that ex,n is well-defined, i.e., independent of the choices of a; and D. Chang- 
ing X means adding some y E y^{Xs) to it, and we have 

n 1 r>\ fnoiv) fnoiy) fnoiy) , 

[ny,D\ [y,nD\ fnoiy) 
Changing D means adding div(/) to it for some / E ks{X)^ , and we have 

ex,n(a;,div(/)) = = -j-— = 1. 

4.3. Functoriality. Let t: X X' he a. morphism of nice varieties. Let x E y^{Xs) and 
D E Div°(X^). It is straightforward to check that 

[X,L*D] = 

whenever both sides are defined. It follows that for [x] E AlbxJ?^] and [D] E (Pic Xs)[n] we 
have 

ex,n(N,i*[Z^]) = ex',„(Kx)],[Z^]). 

4.4. Equality of the pairings. Let J := Albx- We now have three pairings 

ex,n,ej,„,e„: J[n\ x J[n] /i„, 
where the first two are from Section 14.21 and the third is from Remark 14. 1[ 
Proposition 4.2. The pairings ex,n, Gj,n, o-nd e„ are equal. 

Proof. Functoriality with respect to an Albanese embedding X^ — Albx^ shows that ex,n = 

Now we prove that e j^n = ^n- Suppose that a E J[n]{ks) and a' E J[n]{ks) are represented 
by appropriate z E Z^{Js) and z' E Z^iZ). Let D = ^h' E Div°(J,). By definition, 
fnz' = fnD and 

. n fnD{z) fnz'iz) fnz'{z) 

[nz,D\ ^So{nz,z') fnz[nz') 



5. Odd theta characteristics 

Assume char A; ^ 2. Let X be a nice curve of genus g over k. Let u be its canonical 
bundle, and let J := JacX. 



5.L Theta characteristics. A theta characteristic on X is a line bundle on X such 
that d®"^ c:^ u. A theta characteristic is called odd if the nonnegative integer h^l-d) : = 
dimH^[X,'d) is odd. The isomorphism classes of theta characteristics on Xg form a set 
of size 2^^, and the odd ones form a subset <%dd of size 2^~^(2^ — 1) (cf. [Mum71j ). 
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5.2. Theta characteristics and quadratic forms. Given a symplectic pairing e on an 
F2- vector space V, a quadratic form associated to e is a map of sets q: V ^ ¥2 such that 
q{x + y) — q{x) — q{y) = e{x, y) for all x,y eV . 

Theorem 5.1 (Riemann-Mumford) . Suppose that k is separably closed and char k ^ 2. View 
the Weil pairing 62 as a symplectic pairing on J[2] with values in ¥2 — {±1}- 

(a) For each theta characteristic 'd, 

qr. J[2] 

^ ^ ®^) + h%^)) mod 2 

is a quadratic form associated to 62 ■ 

(b) The map 

S/' — > {quadratic forms on J[2] associated to 62} 
■d I — > q^, 

is a bijection. 

(c) A theta characteristic 'd is odd if and only if the Arf invariant of q^ is 1. 

Proof See |Mum71j and |GH04l §4]. □ 

Combining Theorem 15.11 with the following lemma will help us understand the relations 
between the odd theta characteristics in the F2-vector space ^^^^ [2] : see Corollary 15.31 

Lemma 5.2. Let f be in the space F2[a;i, . . . , x„]<2 of polynomials of total degree at most 2. 
Let f2 be its homogeneous part of degree 2. 

(i) /// vanishes on Fg, then /2 is a square. 

(ii) If n is even, and /2 is nondegenerate (as a quadratic form), and V ¥2 is a coset of 
a linear subspace of dimension at least n/2 + 1, then f{v) = for some v G V . 

(iii) // n is even and n > 4 and v G ¥2, and f2 is nondegenerate, then there exists x G F2 
with f{x) = f{x + v) = 0. 

(iv) If n is even and n > 6 and Vi,V2 G F2 , and /2 is nondegenerate, then there exists 
X e¥^ with f{x) = f{x + vi) = f{x + V2) = 0. 

Proof. 

(i) If /2 is not a square, it contains a monomial XiXj with i ^ j, and then restricting to 
the span of the Xi- and lets us reduce to the case n = 2, which is easy. 

(ii) Replacing f{x) by f{x + v) lets us assume that is a subspace. Let e be the symmetric 
bilinear pairing associated to f2- Since e is nondegenerate, e\v has kernel of size at most 
n — dimV^ < dimy, so e\v 7^ 0. Hence f2\v is not a square. Apply @ to f + 1. 

(iii) If w 7^ 0, let V C F2 be the codimension-1 coset defined by f{x + v) — f{x) = 0; if 
v = 0,letV = F^. Apply 

(iv) By (pni) . we may assume that fi, f2 are distinct and nonzero. Let V be the codimension- 
2 coset defined by f{x + Vi) — f{x) = and /(x + V2) — f{x) = 0. Apply (juj). □ 

In the rest of Section 15.21 except in Corollary 15.51 we assume that /c is a separably closed 
field of characteristic not 2, and that X is a nice curve of genus g >2 over k. 

Corollary 5.3. 

7 



(a) If g > 2, then every class in J[2] C [2] has the form -^i + ■&2 (modulo u) with 

(b) If g >3, and . . . E sum to in ^^^[2], then there exist '(}i2,'^34,,'^56 £ «%dd 



such that 



^1+^2+ ^34 + ^56 = 
^93 + ^^4 + A2 +^56 = 
^5 + ^+^2 + ^34 = 



^^7^ [2]- 



Proof. Fix G J^odd- By Theorem 15 -H there is an identification {zeros of in J[2]} — t- ^dd 
given by X H- -i? + X. Identify J [2] with ¥2^, and with a polynomial /. 

(a) Apply Lemma [5.2l(!iII|) with v the class in J [2]. Then x corresponds to the desired "di, 
and X + to '^2. 

(b) Apply Lemma I5.2lfjiv|) with vi = -^i + ^2 and V2 = '0^ + ^4 to get x. Then x corresponds 
to the desired 'O^q, x + vi corresponds to the desired 'i?34, and x + V2 corresponds to the 
desired ^912. The first two relations are then satisfied, and the third is the sum of the 
first two. □ 

By an incidence structure, we will mean a pair (A, S), where A is a set and S is a collection 
of subsets of A. An isomorphism (A, E) — j- (A', S') is a bijection A — )■ A' under which S and 
S' correspond. 

Let S be the set of 4-element subsets of e%dd that sum to in ^^^^^[2]. 

Proposition 5.4. The following structures have the same automorphism group Sp2g(F2).' 

(1) The ¥2-vector space ^^^^[2] equipped with S'odd (viewed as a subset). 

(2) The ^2-vector space J[2] with the Weil pairing 62. 

(3) The incidence structure (^dd;^)- 

Proof. The automorphism group of (2) is Sp2g(F2), so it suffices to show how to build each 
structure canonically in terms of the others. 

(1) — )-(2): By Corollary I5.3([al) . we can recover J[2] as the subgroup of ^-^f;y^[2] generated 

by + '^2 with ^i,'d2 G ^dd- The subset <%dd determines the function mod 2 on the 
nontrivial coset of J[2] in £^^[2]. Choose 1!) E ^odd', from mod 2, we can recover q = q^ 
and hence e2(x, y) = q{x + y) — q{x) — q{y). 

(2) — j'(l): Take the space of functions q: J[2] ¥2 such that {x,y) h- )■ q{x + y) — q{x) —q{y) 
is a multiple of €2- Inside this we have the subset of q for which the multiple is 62 itself and 
for which the Arf invariant is 1. 

(1)^(3): Clear. 

(3) — If (7 = 2, take the F2-vector space P with generator set 3^odd and with one 
relation saying that the sum of the generators is 0. If g > 3, take the F2- vector space P with 
generator set ^odd and with relations given by the elements of S. 

To show that the map e : P — )■ [2] sending each basis element to the corresponding -i? 
is an isomorphism, it suffices to show that its restriction eg: Pq ~^ <^[2] is an isomorphism, 
where Pq is the codimension-1 subspace of P spanned by pairs. Corollary I5.3( la]) shows 
that eo induces a bijection ('^2'*'*)/ ~ — > J[2] — {0}, where {'&i,'&2} ~ {''^3!''^4} means 
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Ylt=i'^i = in ^|^[2]. In particular, eo is surjective. If g = 2, then eo is injective too, 
because dimPo = 4 = dim J[2]. To prove injectivity for g > 3, it suffices to prove tliat every 
relation 

(^^+^2) + (^3 +^4) = (^95 +^6) 

in '^^^^ [2] is a consequence of 4-term relations. But that is true, by Corollary 15. 3l1 b|). □ 



Corollary 5.5. Let k be any field of characteristic not 2. The action of Q on J[2], on the 
set of theta characteristics of Xg or on the set of odd theta characteristics of X^, factors 
through the standard action of Sp2g(^2) on J[2]. 

Remark 5.6. It follows from the connectedness of the moduli space of genus-f? curves [DM69] 
that the isomorphism type of each structure in Proposition 15.41 depends only on g, and not 
on k or X. 

Proposition 5.7. For g>2, we have #S = ^{2'^^ _ i)(229-2 _ i)(2s-2 _ 

Proof. Since Sp2g(F2) acts transitively on J[2] — {0}, all fibers of the summing map ("^2'*'*) — )■ 
J[2] - {0} C 2g^[2] have the same size, namely (2""M2''-i)^ ^(229 - 1) = 229-3 - 2^'-2. Hence 
the number of pairs of pairs such that the two pairs have the same image in J[2] — {0} is 
(225 Each such pair of pairs consists of disjoint pairs, since x + y = x + z 
would imply y = z. Thus each pair of pairs corresponds to a 4-element subset of 3^odd 
summing to with a partition into two pairs. Each 4-element subset can be partitioned in 
3 ways, so 

1 /929-3 _ 05-2\ 99-3 

#S = -(22f-l)(^ =^(22^/_i)(229-2_ 1^^25-2 □ 



3 V 2 , 

5.3. Representing odd theta characteristics by divisors over the ground field. 

Proposition 5.8. An odd theta characteristic i) on X^ whose class lies in (PicX^)^ is 
represented by an element o/DivX. 

Proof. The /c-scheme parametrizing effective divisors whose class equals d is a, Brauer-Severi 
variety, a twisted form of f^^W-'^^ corresponding to a central simple algebra of dimension 
h^{'dY and hence of index dividing h'^{'d) |GS06t Theorems 5.2.1 and 2.4.3], so the associated 
Brauer class r G Brfc is killed by the odd integer h^ij)) |GS06t Proposition 4.5.13(1)]. On 
the other hand, the Hochschild-Serre spectral sequence yields an exact sequence 

PicX (PicX,)^ ^ Brfc 

under which the second map sends d io t and a; to 0, so 2r = 0. Thus r = 0. So ^9 comes 
from an element of PicX, or, equivalently, from an element of DivX. □ 



6. Generalized explicit descent 

6.1. The setting. Suppose that X is a nice variety over k. Let J := Alb^. 
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6.2. True descent. To motivate the definition of a true descent setup, we recall the follow- 
ing: 



Example 6.1. Assume char /c 7^ 2. Let F{x) G k[x] be a non-constant separable polynomial 
of odd degree 2g + 1. Let X be the smooth projective model of the curve y"^ = F{x), so X is 
a hyperelliptic curve of genus g. Let 00 be the unique point at infinity on X, and let A C X 
be the 0-dimensional /c-scheme such that A{ks) consists of the 2g + 1 Weierstrass points 
not equal to 00. Then there is a surjection (Z/2Z)^ — )■ J[2] sending each basis element 
P G A{ks) to the divisor class [P — 00] (see |Mum84l Lemma 2.4 and Corollary 2.11]). The 
family of divisors P — 00 indexed by P G A{ks) may be viewed as a single divisor /3 on X x A. 

Definition 6.2. A true descent setup for X consists of a triple (n, A,^), where n is a 
positive integer not divisible by char k, A = Spec L is a finite etale /^-scheme, and ^ is a line 
bundle on X x A such that ^ ff. In more concrete terms, if we choose /3 G Dw{X x A) 
representing the condition on /3 is that nf3 is principal; i.e., there is a function / G 
k{X X A)^ such that div(/) = nf3. 

Remark 6.3. Given /3, for each P G A{ks), we have the fiber /3p G DivX^. In fact, we may 
think of P as the family of divisors /3p depending ^-equivariantly on P. Similarly, / may be 
thought of as a family of functions fp G k{Xs)^. 

Given [n, A,J^), we will define a homomorphism 



using cohomology, and relate it to a more explicit homomorphism. 
6.2.1. Cohomological definition. Take cohomology of 



to obtain J{k) — H'^{J[n\). The condition on =Sf (or /3) implies that it induces a map 
A — J[n], and hence a homomorphism (Z/nZ)^ — > J[n]. Taking the Cartier dual and 
applying Remark 13.81 yields a: J[n] — > /i^. Composition yields a homomorphism 



6.2.2. Explicit definition. Choose (3 and / as in Definition 16.21 Let be the largest open 

subscheme of X such that / is an invertible regular function on X^°°'^ x A. Then / defines 
a morphism X^"°'^ x A — )■ Gm, and hence a morphism — )■ G^. Evaluating on closed 
points and taking norms (this is necessary if the closed point is of degree greater than 1), 
we obtain a homomorphism Z{X^°°'^) L^. This induces Z°(Xs°°'^) L^/L^". If we 
change {(3,f) to {(3',f'), then /3' — /3 is the divisor of some g G k{X)^ , and /' = eg""/ for 
some c & k^. If we evaluate on any 2; G Z^{X) that is good for both / and /', then the value 
of the homomorphism in L^/L^"- is unchanged (the value of g gives an n^^ power, and the 
value of c is c'^°s^ = 1). Given any z G Z^{X), we can move /3 to avoid z, so the compatible 
homomorphisms glue to give a homomorphism 



^ J[n] ^ J A J ^ 



(3) 




(4) 



C: Z' 



(X)-> 
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6.2.3. Compatibility of the two definitions. 

Proposition 6.4. The maps C and C are compatible in the sense that the following diagram 
commutes: 

Z%X) ^ c 



J{k) 



H\J[n]) ^ H\^i^^ 



Proof We may fix (/?,/) and consider instead of Z^{X). Let Z° = ^^(Xf"'^) 

and let 3^° be tfie Albanese kernel in tlie exact sequence of ^-modules 

^ 3^° ^ Z° ^ J{ks) -> 0. 

We will construct the following commutative diagram of ^-modules with exact rows (we 
write J for J{ks), and so on): 

(5) > J[n] > J > J > 




The top and bottom rows are familiar. Surjectivity of the map x 3^° — )■ Z'^ given by 
{z,y) ^ nz + y follows from surjectivity of multiplication by n on J{ks) = Z^ jy^; let J\n\ 
be the kernel of the nz + y map. We have 

J\n] = {{z, -nz) G Z° X : [z] G J[n]{ks)}. 

All the upward maps are induced by Z^ — )■ J {kg), so commutativity of the top part of the 
diagram is straightforward. 

The middle and rightmost downward maps in 

z^ X ^ <ai 

z , y ^ — > f{z)[y,P] 



are given by 
ifpiz) ■ [2/,/3p])p6A(fc.) 



C: 



z ^ f{z) 

The bottom right square commutes since 

ifiz) ■ [yj]r = f{nz) ■ [i/,n/3] = f{nz)f{y) = C{nz + y). 

The leftmost downward vertical map is obtained by restricting the middle one. 

Finally, we check that a and the vertical maps in the first column form a commutative 
triangle. Since sends P to [13 p] , Remark 14.11 and the Albanese-Picard definition of e„ 
show that for any [z] G J[n], 



a{[z]) = en{[z] 



[nz, (3] 
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fiz)-[-nz,P], 



so the images of an element {z, —nz) G J[n] under the two paths to //^ are equal. This 
completes the construction of ([5]). 
Taking cohomology of ([5]) yields 

J{k) ^ J{k) > ^'(^N) 



Z°(Xg°°d) >H^{J[n]) 




Equality of the compositions from Z^[X^°°'^) to H^{fi^) is the desired result. □ 

Remark 6.5. If U is a dense open subscheme of X, then by a moving lemma, Z^{U) and 
Z^{X) have the same image in J{k). [Proof: It suffices to prove that any closed point x 
of X is rationally equivalent to a 0-cycle supported on U. Pick a closed point u E U. By 
a classical Bertini theorem, or |Poo04t Corollary 3.4] if k is finite, we can find a nice curve 
C C X through x and u, and hence reduce to the case in which X is a curve. In this case, 
it suffices to apply weak approximation to find a rational function on X with prescribed 
valuations at the points oi X — U.) 

Corollary 6.6. The explicit homomorphism C m (jlj) induces a homomorphism 

C- 

■ \nJ{k)J^ Lxn- 

6.3. Fake descent. For computations using true descent setups to be practical, the degrees 
of the components of A (i.e., the degrees of the field extensions whose product is L) should 
be not too large. A fake descent setup will be a variant of the true descent setup, a variant 
that may allow a simpler A to be used, at the expense of giving less direct information about 
Selmer groups. In Section [631 we show that the true descent setup can be viewed as a special 
case of the fake descent setup. 

Definition 6.7. A fake descent setup for X consists of a triple [n, A, ^), where tt, is a positive 
integer not divisible by char/c, A = SpecL is a nonempty finite etale /c-scheme, and ^ is a 
line bundle on X x A such that is the puUback of a line bundle on X. Equivalently, 

in terms of a divisor /3 G Div(X x A) representing the condition is that there exists 
D G DivX is such that n/3 — (D x A) is principal; i.e., there is a function / G k{X x A)^ 
such that div(/) = nf3 - {D x A). 

Remark 6.8. On the fibers, the last condition says that div(/p) = n[5p — D for all P G A[ks). 
Subtracting shows that [/3p — G J[n] for all P,Q E A{ks)- 

Examples 6.9. Definition 16.71 is motivated by the following examples of fake descent setups 
for curves. 

(i) Assume char/c ^ 2. Let tt: X — !■ be a (ramified) degree-2 cover, so X is a hy- 
perelliptic curve. Let n = 2, let A C X be the ramification locus of vr, and let /3 be 
the diagonal copy of A in X x A. Then we can take D = 7r*{y) for some y G F^{k) 
(cf. |FPS97j ). See Example 1 1 . 1 8 1 for more about this case. 
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(ii) The previous example generalizes to other geometrically generically cyclic covers vr : X — )■ 
Pi (cf. jPS97] l Let n > 2. Let k he a field with char f n. Suppose that F{x) G k[x] 
factors completely in ks[x] and is not a p^^ power in ks[x] for any p \ n. Let X be the 
smooth projective model of = F{x). Let vr: X — )■ be the x-coordinate map. Let 
A be the ramification locus of vr. Let /3 be the diagonal copy of A in X x A. Then we 
can take D = n*(t) for some t e F^{k). 

(iii) Assume char A; ^ {2,3,7}. Let X be a twist of the Klein quartic curve x^y + y^z + 
z^x = in P^. Let n = 2, let A correspond to the ^-set of 8 triangles, as defined 
in |PSS07l §11.1], and let /3 G Div(X x A) be the divisor of relative degree 3 over A 
such that each /3p is the sum of the 3 points in the corresponding triangle. This gives 
a fake descent setup, provided that D can be found (as turned out to be the case for 
the curves of interest in |PSS07j ). 

(iv) Assume char/c ^ 2. Let X be any curve of genus g > 2 over k. Let n = 2. Let A 
correspond to the ^-set of odd theta characteristics on X^. Proposition 15.81 applied 
over the residue fields of each point of A shows that one can find (3 G Div(X x A) such 
that each /3p is the corresponding odd theta characteristic. Then one can take D to 
be a canonical divisor. This gives a fake descent setup that in principle can be used to 
perform a 2-descent on the Jacobian of X. When g = 2, this specializes to Example 

A fake descent setup (n. A, ^) will give rise to a cohomologically defined homomorphism 

(6) C: J{k) ^ 
that we will relate to an explicit homomorphism 

(7) C: Z\X) -> 



6.3.1. Cohomological definition. By the final statement in Remark 16.81 =Sf (or /3) induces a 
homomorphism 

McgO 

Dualizing 

{'L/nZ)^^^Q (Z/nZ)^ Z/nZ 
yields ((Z/raZ)^ q)^ ~ so the dual of is a homomorphism 



a: J[n] — )■ 



The composition 



J{k)-^H\j[n])^H' (^) 



is the desired homomorphism C. 

6.3.2. Explicit definition. As in Section r6.2.2[ / gives rise to a homomorphism ^(X^°°'^) — 
L^. If we change (/3, D, f) to (/?', D' , /'), then — /3 is the divisor of some g G k{X x A)^, 
D' — D is the divisor of some h G fc(X)^, and /' = {cg^/h)f for some c G k{A)^ = . 
If we evaluate on any z G 2°(X) that is good for both / and /', then the value of the 
homomorphism in /L^^k^ is unchanged (the value of g^/h gives an element of L^'^k^ , 
and the value of c is c'^^^^ = = 1). Thus we obtain (171). 
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6.3.3. Compatibility of the two definitions. Taking cohomology of 

,A 



yields 

(8) 



l/',,A 



SO we may identify L^/L^'^k^ with a subgroup of (/i^//i„,). 

Proposition 6.10. T/ie two maj^s C and C are compatible in the sense that the following 
diagram commutes: 



J{k) 



H\J[n]) 




Proof. We replace the pairing [y, /5] used in the true case with 



(9) 



D 



[y,l3-H] 



h{yy/- 

where H E Div(Xs) and h G ks{X)^ are chosen so that div(h) = D — nH, and h{yy^"' is 
a chosen n**^ root of h{y) (and then if and h^yY^"" are pulled back to (X x A)^); such H 
and h exist because one possibility is to take H = [5p for some P e A(/cs). If we change 
to another choice if', then h is changed to /ij where div(j) = uH — nif', so the value 
of ([9]) is multiplied by [?/, if — H']/j{yy^^, which lies in ^n{ks) since its n^^ power equals 
[y, div(j)]/j(y) = 1. Thus ([9]) is well-defined and Galois-equivariant. Also, 



(10) 



[y,nl3-nH] [y, div(//i)] {fh){y) 



h{y) 



h{y) 



h{y) 



f{y)- 



As in the proof of Proposition 16. 4[ we construct a commutative diagram with exact rows: 
(11) >J >J >0 




The first two rows and the vertical maps between them are the same as in ([5]). The bottom 
row is a pushout of the bottom row of ([5]). 
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The middle downward map is 



The rightmost downward map is 



, y 



-A 



z 



/in 



The bottom right square commutes since (iTOl) imphes 

U{z)[y,P]DT = f{zrf{y) = f{nz + y). 

The leftmost downward vertical map is obtained by restricting the middle one. 

Finally, we check that a and the vertical maps in the first column form a commutative 
triangle. Any {z,—nz) G J[n] maps up to [z] G J[n], and maps right and down to f{z) ■ 
[—nz^0\D G Remark 14.11 and the Albanese-Picard definition of e„ show that 



a{\z]) = eniXzUP - H]) 



f{z)h{z) 



[nz, 13 -H] 

So the triangle commutes. This completes the construction of ([TT 
Taking cohomology of (fTTl) yields 



f{z)-[-nz,[5]n 



J{k) 



J{k) 



H\J[n]) 



H\J[n]) 




Equality of the compositions from to is the desired result. 

Corollary 6.11. The explicit homomorphism C in ^ induces a homomorphism 

J{k) \ 



□ 



C: 



nJ{k) 



Corollary 6.12. The homomorphism C , which a priori depends on /3 and D, in fact is 
independent of D and depends only on the linear equivalence class of p. 



Proof. The linear equivalence class of (3 is all that is needed to define C. 



□ 



Remark 6.13. By Corollary 16. 12[ we may move (3 and D within their linear equivalence classes 
and change / accordingly in order to make div(/) avoid any particular 0-cycle. Hence we 
may view C as being defined on all of Z^{X). 
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6.4. Isogenies associated to descent setups. Given a true or fake descent setup, we 
obtain a liomomorpliism a^: i? — )■ J[n\^ wliere E := {'L/n'L)^ for a true descent setup and 
E := (Z/nZ)^j,gQ for a fake descent setup. 

In either case we obtain an isogeny </>: J ^ A \= J /a^{E), and J[0] = a^{E). Let A be 
the dual abelian variety of A, and let </> : A — )■ J be the dual of (f). 

Proposition 6.14. The homomorphism C: J{k) — )■ H^^E"^) factors through the quotient 
J{k)/4>A{k). 



Proof. By |Mum70l §111.15, Theorem 1], ~ J[0]. Now a"^ : E ^ J[n] factors through 

a'^lE) = J[0], and dualizing shows that a: J[n] — > E"^ factors through A[(f)\. This explains 
the right triangle in the commutative diagram 

J{k) 



(12) 



nJ{k) 



J{k) 
(t)A{k) 



H\J[n]) >H\E'') 



H\A[ct>\l 



while the square comes from functoriality of connecting homomorphisms. Since the top row 
gives C, the result follows. □ 

Corollary 6.15. The explicit homomorphism C defined on Z^{X) factors through not only 
J{k)o or {J{k)/nJ{k))o, but also {J{k) / (t)A{k))o. 

Proof. Combine Proposition 16. 141 with Proposition 16.41 or Proposition 16. lOl □ 

Let R := kera^, so we have an exact sequence 

(13) — > R — >E ^J[4)\ — ^ 0. 
Dualizing yields an exact sequence 

(14) — ^ A[<j)\ ^ ^ i?^ 0. 
Take cohomology: for a true descent setup we obtain 



(15) 

> A[(t)]{k) E'^ik) R'^ik) 

and for a fake descent setup we obtain 

(16) 



c 



(f)A{k) J ^ L^"" 
c 



^H\A[<f>]) 
J{k) 



H\E 



c 

s- 



(f)A{k) J ^ ' L'^'^k'' 
c 



A[<p\{k) E'^ik) R'^ik) > H\A[^]) H^E"- 
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-^H\R'') 



The commutativity follows from Proposition 16.41 or Proposition 16.101 



6.5. Comparison of true and fake descent setups. A fake descent setup {n, A, ^) 
in which there exists P G A(/c) gives rise to a true descent setup [n, A' , as follows: 
Let A' = A — {P} and define P'q = Pq — Pp for each Q G A'. The etale algebras L, L' 
corresponding to A, A' satisfy L c:^ L' x k. One can check that the fake diagram (fTT!) maps 
to the true diagram ([5]) as follows: the first two rows map via the identity, and the third row 
maps via the homomorphisms induced by {cq)q^^ H- {cq/cp)q^^'. Finally, the exphcit true 
and fake homomorphisms are compatible in the sense that 




commutes. 

Moreover, every true descent setup can be obtained from some fake descent setup in this 
way, at least if k is infinite. Thus fake descent is a generalization of true descent. 

6.6. Notation. For our intended application, we are primarily interested in fake descent. 

To avoid having to state things twice, we let L^/L^'^k^ denote L^/L^^ in the context of 
a true descent setup, or L^/L^^k^ in the context of a fake descent setup. If w G Qk, let 

Ly := L ®fc ky and define / L^^k^ similarly. Decompose L as where each Li is a field. 

6.7. Restrictions on the image of C. Recall that R E C (Z/nZ)^. 

Lemma 6.16. Suppose that the image of the diagonal Z/nZ — (Z/nZ)^ is contained in R. 
Then the image of C : Z^{X) — )■ L^/L^^k^ is contained in the kernel of the homomorphism 
N: L^/L^"k^ — k^/k^"' induced by the norm map k^ . 

Proof. Dualizing the complex 

Z/nZ ^ E ^ J[0] 

and applying yields a complex 

H\A[<P]) ^ H\E'') ^ 



The restriction of N to the subgroup / L^'"-k^ equals A^, because it is induced by dualizing 
Z/nZ — )■ (Z/nZ)^ and taking cohomology. The result now follows from the commutative 
squares in f[T5]) and ffTB|) . □ 

7. Unramified classes 

7.1. Local and global unramified classes. Let /c„ be a non-archimedean local field. If 
M is any ^^^-module, define the subgroup of unramified classes 

H\ky,M)^^, ■= ker {H\K„ M) ^ H\ky,u, M)) ^ H\G&\iK,u/K), M{ky,u)), 

where the isomorphism follows from the inflation-restriction sequence. 
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Now let khe a global field, and let iS be a subset of Qk containing the archimedean places. 
If M is any ^fc-module, define the subgroup of classes unramified outside S, H^{k, M)s, as the 
set of ^ G H^{k, M) whose restriction in H^{k.u, M) lies in H^{kv, M)unr for all v ^ S. 

7.2. A Tamagawa number criterion. Let k^ be a non-archimedean local field. Let 
(j): A — 7- J be a separable isogeny of abelian varieties over k^. The short exact sequence 

^ A[(j)\ ^aAj^Q 

gives rise to a connecting homomorphism 7^: J{ky) — )■ H^{k^, A[(j)\). Let J be the Neron 
model of J over O^. Let be the connected component of the identity in J^. Let $ be the 
group of connected components of the special fiber J7 x F^, so $ is a finite etale commutative 
F^,-group scheme. The number c„(J) := 7^$(Ft,) is called the Tamagawa number of J at v. 
We use analogous notation for objects related to A. 

Lemma 7.1. Let (p: A ^ J be as above. Let n be a positive integer such that nA[0] = 
(one possibility is n = deg(f)). If the residue characteristic char F^, does not divide n, and if 
Cv{J) and c^{A) are coprime to n, then ■jv{J{ky)) = H^iK, A[(f)])unT- 

Proof. This is a straightforward generalization of the proof of |SS04l Lemma 3.1 and Propo- 
sition 3.2], which uses results from |Sch96l §3]. □ 

7.3. Unramified elements in the target of the descent map. Now suppose that k is 
a global field and that we have a true or fake descent setup. From ([T5l) or f|T6l) applied to k^ 

we obtain / L^'^k^ H^{ky, E"^). Call an element of /L^^k^ unramified if its image 
in H^{ky, E"^) is unramified. 

Let 5 be a subset of Qk containing the archimedean places. Say that an element of 

/ L^^k^ is unramified outside S if its image in L^/L^"-k^ is unramified for each v ^ S. 

Let [L^ /L^'^k^)g be the subgroup of such elements. Proposition 17.21 will provide an explicit 

description of (L^/L^"A;^)^. 

Given £ G L = H-^*' image in Lj. Let L{n,S) be the subgroup of L^/L^"^ 

consisting of elements represented by ^ G such that the prime-to-5 part of the fractional 

ideal (ii) of Li is an n}^ power for all i. In the true case, let L{n,S) = L{n,S); in the fake 

case, let L{n,S) be the subgroup of L^/L^k^ consisting of elements represented by £ G 
for which there exists a fractional ideal a of k such that the prime-to-5 part of a ■ (ii) is an 
n}^ power for all i. 

Proposition 7.2. Suppose that S C Qj^ contains all archimedean places and all places of 
residue characteristic dividing n. Then {L^ / L^"k^)^ = L{n,S). 

Proof. The statement and proof are the same as for |PS97t Proposition 12.5]. □ 
Proposition 7.3. The group L{n,S) is finite and computable. 

Proof. Let Og and Ol,s be the rings of iS-integers in k and L, respectively; then there are 
exact sequences 

(17) ^ ^ ^ L(n, 5) -> CI{Ol,s) N ^ 

18 



and (in the fake case) 

C\{Os) 



k{n,S) L{n,S) -)■ L{n,S) 



as in |PS97t Propositions 12.6 and 12.8], where these are constructed for prime n. So the 
finiteness follows from the Dirichlet 5-unit theorem and finiteness of the class groups, and 
the computability follows too since these are effective. □ 

Remark 7.4. The computation of the unit groups and class groups typically dominates the 
running time in performing explicit descent. 

Proposition 7.5. Let M be a finite Q-module with char/c \ #M. Let S he a finite set of 
places of k containing the archimedean places. Then H^{k, M)s is finite. 

Proof. Using the inflation-restriction sequence lets us enlarge k to assume that Q acts trivially 
on M and on the roots of unity of order dividing #M. Decomposing M as a product of cyclic 
groups lets us reduce to the case M = /i„ where charfc f n. Now H^{k,fj,n)s — {k^ /k^"')s, 
which, as in Proposition 17. 3[ is finite. □ 

8. Finite Galois modules and III^ 

Let /c be a global field, and let M be a finite ^^-module. If w is a place of k, write 
H^{k,M) — )■ H^[kv,M) for the restriction to a decomposition group associated to v; if 
^ G H^{k,M), let G H^{k^,M) be its restriction. As usual, define 

Ul\k, M) := ker [ H\k, M) JJ H\k^, M) | . 

\ V&^k J 

Lemma 8.1 (cf. |Mil06l Example I.4.11(i)]). If acts trivially on M, then m^{k,M) = 0. 

Proof. The hypothesis implies that H^{k, M) = Hom(^fc, M), where Hom denotes the group 
of continuous homomorphisms. Chebotarev's density theorem implies that the union of the 
decomposition groups Qk^ is dense in Qk, so the map 

RomiGk^M) ^ J]Hom(6;fc„,M) 

is injective. This implies the result. □ 
Lemma 8.2. If p is a prime not equal to char/c, and A is any Q-set, then LQ"^(A;,/i^) = 0. 

Proof. By Shapiro's lemma, one reduces to proving that LQ^(/c,/ip) = 0. The latter is the 
well-known fact that an element of k^ that is a p^^ power in every fc„ is a p^^ power in k. □ 

The following result allows us to compute Iil^{k, M) using finite group cohomology. 

Proposition 8.3. Let k he a glohal field, let M he a finite Qk-module, and let L he a splitting 
field of M. Let G = Gal{L/k). For v G Vtk, let G G denote a decomposition group. Then 

m\k,M) ~ ker (^H\G,M) JJ iJi(D^, M)) . 
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In particular, 

m^(fc,M)C Pi keT{H\G,M) H\H,M)). 

cyclic H <G 

Proof. Inflation-restriction with respect to 

and its local analogues yield the exactness of the last two rows in the commutative diagram 







U1\G,M) 



H\G,M) 



m\k,M) 



H\k,M) 



H\L,M) 



> n. H\D,, M) > n. M) > n. H\L,, M), 

in which the groups in the top row are defined as the kernels of the vertical maps connect- 
ing the second and third rows. Lemma 18.11 yields K2 = 0, so the first statement of the 
lemma follows. By Chebotarev's density theorem, every cyclic subgroup of G occurs as a 
decomposition group; this implies the second statement. □ 

9. Definition of Selmer groups and sets 
9.1. Selmer groups associated to isogenies. 

Definition 9.1. Let (p: A — )■ J be an isogeny of abelian varieties over a global field k 
such that char A; \ deg0. For each v, we obtain a connecting homomorphism 7^: J{ky) — t- 
H\ky,A[(j)]). Define 

Sel*(J) := {6 G H\k,A[(j)]) : 6^ G im7„ for all v} . 

Proposition 9.2. Let S be a finite set of places of k containing 

• all archimedean places, 

• all places where the residue characteristic divides n, and 

• all places where the Tamagawa number of J or A is not coprime to n (these form a 
subset of the places of bad reduction). 

Then 

(a) Sel'^(J) = {5 G H'^{k,A[(l)\)s : G im7„ for all v G S}. 

(b) The group H^{k, A[(j)\)s is finite. 

(c) The group Sel'^(J) is finite. 

Proof. 

(a) Apply Lemma mi to k^ for each v ^ S. 

(b) Finiteness of H^{k, A[(l)])s is a special case of Proposition 17.51 



(c) This follows from flaj) and (Ml 



□ 



The image of J{k) / (j)A{k) t- H'^{k, A[(f)\) is contained in Sel''^(J), by definition of the 
latter. 
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9.2. Selmer groups associated to descent setups. We define true and fake Selmer 
groups by replacing if ^(/c, y4[0]) by its explicit analogue L^/L^"A;^, and by replacing 7^, : J{ky) — )■ 
H^{ky, A[(f)\) by Cy = C^,, which is a homomorphism J{k^)° / L^"-k^ . 

Definition 9.3. Given a true descent setup (n, A,/3), define the true Selmer group 

f 

Sel"j.^p(J) := < 5 G - — : 6^ G im{Cy) for all places v oi k 

Given a fake descent setup (ra, A,/3), define the fake Selmer group 

f 

SelJ^^g(J) := < 5 G : 5^ G im(Ct,) for all places v k 

To avoid having to state results twice, we use Sel"i.ue/fake(<^) to denote either Sel"i.ue('^) 
or Sel^^.(,(J), depending on whether we are considering a true or a fake descent setup. 

9.3. True and fake Selmer sets for X. Suppose that we have a true or fake descent 
setup for X, and that we fix / G k{X x A)^ as in Definition 16.21 or 16.71 and define X^°°'^ 
accordingly. Evaluation on closed points as in Section [6. 2. 21 or [6. 3. 21 defines a homomorphism 

Cf. Z{X^°'"^) Since Cf and C agree on Z°(Xs°°'i), they have a common 

extension to the sum of their domains, Z[X^°"'^) + Z^{X) = Z[X). Then we may restrict 
to X{k) to obtain a map of sets 

Cf. X{k) L^'^Jl^k''. 
Similarly, for each f G f2fc, we obtain 

Cf,,:X{K)^L{/Lfk-. 
As the notation suggests, these maps depend on the choice of /. 
Definition 9.4. Given a true or fake descent setup for X and /, define 



SelLc/fakc(^) ■= • ^ for all places v oi k 



Lemma 9.5. Suppose that the image of the diagonal Z/nZ — t- (Z/nZ)^ is contained in R. 
Then there exists c e k"" such that N{df{z)) = c'^'^s^ m A;^/A;^" for all z G Z{X). 

Proof. In the true case, the hypothesis on R implies that YIp^a ~ div(r) for some r G 
k{XY. Then diY{NL/k{f)) = ^iEpsa/^p = div(r"), so NL/k{f) = cr'' for some c G A;^. 
Evaluating on any z G Z{X^°°'^) yields the result for such z. On the other hand. Lemma [6. 161 
yields the result for z G Z^{X). Together, these prove the result for any z G Z{X^°°'^) + 
= Z{X). 

In the fake case, the hypothesis on R implies that ^^A = nm for some m G Z>o and that 
(Ep6a/3p) -mD = div(r) for some r G Then div(iVi/fc(/)) = n (Ep^a /^p) " 

nmD = div(r"), so Niji^{f) = cr^ for some c E k^ . The rest of the proof is as in the true 
case. □ 
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10. Relations between various Selmer groups 

In Sections I10.H - [T0^ we will assume the following: 

Hypothesis 10.1. The maps J{k)o — t- J{k) / (pAik) and J{k^)o J{ky)/(f>A{kv) are surjec- 
tive for all places v of k. 

There are some common situations in which Hypothesis IIP. II is justified: 

Lemma 10.2. Suppose that X is a nice curve such that 



(i) X has a k-point (or more generally H^{k, Fic Xg) Z is surjective), 



or 



dcs 

IS 



(ii) k is a global field and X has a ky-point (or more generally if°(/c„, Pic J Z 
surjective) for every v ^Vt^, or 

(iii) k is a global field of characteristic not 2 and X is the smooth projective model of a 
hyperelliptic curve = f{x) of even genus. 

Then J{k)o = J{k). If moreover k is a global field, then J{ky)o = J{kv) for every v, so 
Hypothesis \10.1\ holds. 

Proof. For ^ and dH]), see |PS97t Propositions 3.2 and 3.3]. For dm]) (generalized to superel- 
liptic curves), see |PS97l end of §4]. □ 

Hypothesis 110.11 will let us define a map from the usual (/)-Selmer group into the Selmer 
group associated to our descent setup; without this map, not much could be said about how 
the groups relate. In Section [10. II we study a local group that in a sense measures the dif- 
ference between the local descent map 7^ and our approximation C^. In Section [T0.3l we define 
a global group /C with a homomorphism k : /C — )> Wy whose kernel and cokernel control 
the difference between the actual 0-Selmer group and our explicit Selmer group Se\^^^^^f^y.^{J) . 



10.1. Local considerations. We fix a place v of k. Diagram f[T5|) or f[T6l) applied to ky 
yields 



(19) 



Cv 



E'^iky) R^iK) > H\ky, A[0]) H\ky, E^) > H\ky, i^^ ) 

in which the main row is exact. The group kera^ is hence isomorphic to R}^ (ky) / qE"^ (ky) , 
which is finite, and computable in terms of the actions of the decomposition group of v on 
and i?^. 

Since Cy = ay'jy in (HM . we have an exact sequence 
(20) kerCt, — )■ kera^, — )■ coker7t, — )■ cokerC^,. 

Definition 10.3. Let Wy be either of the following naturally isomorphic groups obtained 
from (120|): 

(i) the cokernel of the first map ker Cy — ?■ ker ay 

(ii) the image of the second map kera^, — )■ coker7t,, or 

(iii) the kernel of the third map coker7^ — j- cokerC^. 
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Lemma 10.4. For any v G Qk, the group is finite, and 



# coker q ■ ^imCy 



Proof. The group kera^, ~ coker g is finite. Separability of (j) implies that (f)A{kt,) is an open 
subgroup of the compact group J{kv), so the group im7^ ^ Jik^) / (pAik^) is finite too. By 
(ITU]) and Definition 110. 3[!il|) . we have exact sequences 



— y im n ker — > ker — > Wy — 
— )■ im 7^, n ker — >■ im 7^, — > im C„ - 

which let us compute i^W^. 

The following lemma will let us understand for most v. 

Lemma 10.5. Let v be a non-archimedean place of k such that 

(i) the residue characteristic of v does not divide n, and 

(ii) the Tamagawa numbers Cy{J) and Cy{A) are coprime to n. 

Then 







□ 



(a) im(a) C H\ky,E' 

(b) iy„ = im ^''^^'^^ 



., and 
{kv,u) 

^qE^iky) ' qE^{ky,u) 
Proof. The commutative diagram 

(21) 



R'^jky) 
qE-^iky) 




H\ky,A 



H\ky,E^ 



qh, [Ky^u) 



has exact rows (cf. (IT9l)). The central column is exact too, by (ji]), (jn]), and Lemma [7.11 

(a) In dni), J{ky)/(f)A{ky) maps to in H\ky^^,E''), so im(C^) C H\ky, E"")^,^,. 

(b) By Definition [lOjijill), 

Wy = im (ker ay coker 7^) 

R^'iky 



im 



qE^iky] 



^ H\ky,u,A[(l)]) 



R^ (ky) Ry {ky u) 



qE^{ky) qE^{ky,^)J ' 



□ 



Corollary 10.6. For all but finitely many v, we have Wy = 0. 
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Proof. For all but finitely many v, the residue characteristic of v does not divide n, and 
J and A have good reduction at v, so Cy{J) = c„(A) = 1. If we also discard the finitely 
many v at which E"^ is ramified, then for the remaining v the surjection E'^ — )■ i?^ of finite 
etale group schemes induces a surjection E^(kv^u) = E'^{K,s) R'^{kv,s) = R'^{K,u), so 
Lemma flO.SIfjbl) implies that PK, = 0. □ 

Corollary 10.7. The product Ylven,, ^« '^^ ^ finite group. 

Proof. Combine Lemma [10.41 and Corollary 110.61 □ 

Lemma 10.8. If v is complex, or if v is real and n is odd, then Wy = 0. 

Proof. If V is complex, then Gal{ky^s/kv) = Gal(C/C) = {1}. If v is real then Gal{ky^s/kv) = 
Gal(C/]R) = Z/2Z. Our assumptions assure that in either case, Gal(/c^^s/fc^) is annihilated 
by a unit modulo n, so H\ky, A[(t)]) = H^{K, E^) = 0. It follows that iV^ = 0. □ 

10.2. Finite description of true and fake Selmer groups. Let S be as in Proposi- 
tion 19.21 Given another finite set of places T, define 

Sr ■■= {S G Un^) : 6 e im(a) for all ^; G t} . 

Theorem 10.9. Let S and T be as above. 

(a) We have SeC^(J) C Sr- 

(b) For each 6 & L{n,S), fix a finite Galois extension ks/k splitting i?^ such that 6 maps to 
in H^{ks, -R^). //T contains all places in S, all places at which E"^ ramifies, and enough 

places so that for each 5 G L{n,S) the Frobenius elements Frobt, for v eT unramified 
in ks/k cover all conjugacy classes in Gal^ks/k), then Se\^^^^^f^]^^{J) = S-j-- 

Proof. 

(a) For V ^ S, Lemma [10.5( [al) proves that Sel"j,yp/fjj]^-p( J) consists of elements unramified at v. 

Proposition 17.21 now shows that Sel"j,yp/fjj]^-p( J) C L{n,S). The condition 5 G imC^ in the 
definition of Sr is also in the definition of Sel"j,yp/fj^]^p( J). 

(b) Suppose that 6 G Sr- Given v ^ T, we must show that 6 G imC^,. Choose w E T 
unramified in ks/k such that the conjugacy classes Frob^ and Frob^ in Gal{ks/k) match. 
By definition of 5*7-, we have 6^ G imC^. Then f|T9l) for fc^ shows that 6 maps to 
in H^{kw, K^). In other words, 6 G H^{Gal{ks/k), R}^) restricts to at w. But the 
decomposition groups of v and w in Gsi\{ks/k) are conjugate, so 6 maps to in H^{ky, i?^) 
too. Thus the element 6^ G H^{ky,E'^) is the image of some G H^{ky, A[(f)]). Since 
V ^ S, the element 6^ is unramified; in particular, maps to in H^iky^ui E^)- By 
hypothesis, E'^ is unramified at f, so E^ik^^u) R^ {ky,u) is surjective, so the bottom 
row of fl?Il) shows that H^{ky^u^ A[(l)\) — H^{ky^u, E"^) is injective. Thus maps to 
already in H^{ky^u, A[(j)])] i.e., ^y G H^{ky, A[(p])^-ar. By Lemma m| ^y is in the image 
of J{ky) under 7^. Thus 6y is in the image of J{ky) under Cy. □ 

Remark 10.10. Here we show how to compute a finite set T as in Theorem I lO.QKlbl) . A finite 
splitting field /ca of A will split . Given 6, represented hj i = G , say, adjoining 
all n**^ roots of the ii to k/^ yields a candidate for ks- The Chebotarev density theorem 
guarantees that we can find enough v unramified in ks/k to cover the conjugacy classes. 
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Remark 10.11. In practice, we may choose a smaller T, one that does not satisfy the hy- 
potheses in Theorem I10.9[|b|) . Then we have only inclusions 



C{Jik)) C SeC/,,ke(^) C Sr. 

But if we find enough points in J{k) to show that C{J{k)) = S-j-, then we obtain Sel°j.^g/f3^]^g( J) = 
Sj- nevertheless. Often T = S suffices. 

10.3. Comparison of the Selmer group associated to an isogeny with the Selmer 
group associated to a descent setup. In the following, we will study the relation between 
the Selmer group associated to a true or fake descent setup (which is an object we can hope to 
compute) and the Selmer group associated to the isogeny (p determined by the descent setup 
(which is the object we would like to compute). Theorem 110.131 will show that a induces a 
homomorphism from the latter to the former. 

Lemma 10.12. We have an exact sequence 

H\k,,E'') 



^ SeC/f,ke(^) ^ H\k, E"") ^ n 



im C„ 



Proof. In the true case, L^/L^" = H^{k,E^), so this is just the definition of Sel"j,yp(J). In 
the fake case, ([8]) for k and its completions yields a commutative diagram 

> — ^- >H\k,E'') ^BrA; 



Ilj^^IlH\h,E^)^llBrk. 

V ^ V V 



with exact rows. An element 6 G H^{k, E"^) mapping into imC^, C /L^"-k^ for all v maps 
to in Br A;^, for all v, so by the local-global property of the Brauer group, it also maps to 
in Bik, so 5 e L^/L^"A;^. Thus 

Let /C be the kernel of the global map a: H^{k, A[(f)]) — )■ H^{k, E"^), which by f[TB|) equals 
the (computable) cokernel of q: E'^^k) — ?■ {k). Let /t be the composition 

(22) /C = ker a — )■ JJ^ ker -» JJ^ im(ker — )■ coker 7^) = JJ^ Wy. 

V V V 

The following proposition gives a homomorphism Sel'^(J) ^^^tme/iakeiJ) provides 
information on its failure to be an isomorphism. 

Theorem 10.13. We have an exact sequence 

^ ker«: Sel*(J) SeC,/,,,,(J) n a{H\k, A[<P])) coker 
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Proof. By definition of k, the diagram 

(23) >/C >H\k,A[(f)]) 



{H\k,A 



->0 







H\K,A 
im7^ 



n 



im Cy 



commutes. By definition of K, and Definition I10.3l1iii|) of W^, the rows are exact. Apply tlie 
snake lemma and take the first four terms of the snake; Lemma [10.121 identifies the kernel of 
the third vertical map. □ 

Corollary 10.14. l^e /iawe # ker (Sel'^( J) ^ SeC/f^kc(^)) < 4^^" {k) / qE"" {k) . 

Proof. By Theorem 110.131 the kernel is isomorphic to ker/t C /C ~ {k) / qE^ [k) . 

The following summarizes the best possible situation. 

Corollary 10.15. Assume that '^Q^truc/iakci.J) ^ a[H'^{k,A 
places V of k. Then we have an exact sequence 

^ /C ^ Sel*(J) SeC,/,,,,(J) 

In particular, # Sel^J) = #/C ■ # SeC,/f,kc(^). 

Proof. In Theorem 110.131 the homomorphism k: /C — is 0. 

We need a criterion that tells us when Sel^rue/fakcl"^) is already contained in a (^H^{k, A 
Recall the discussion of III^ in Section [8] and the exact sequence 

— ^ ^ ^ i?^ ^ 0. 

Lemma 10.16. 

(a) There is an exact sequence 



□ 

and that = for all 
0. 

□ 







SeCe/fake('/)na(i/^(A;,A 



Self 



(b) In particular, ifm\k,R'') = 0, then Sel^^^/^^^^iJ) C a{H\k, A[(t)])) . 

Proof. The last three terms in ( jTSj) or (fT6|) for k and the k^ give rise to a commutative 
diagram with exact rows: 











a{H'ik,Am 



H\k,E^ 



H\k,By 



n 



n 



im im 

V V V 

Take the kernels of the three vertical maps and apply Lemma [10. 12[ 



X[H\k,By 



□ 



Remark 10.17. Results of Section [8] allow us to bound LQ^(A;,i?^) and to prove that it is 
in many cases. 
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Example 10.18. We revisit the fake descent setup in Example I6.9l1i| ) used for 2-descent on 
the Jacobian J of a hyperelliptic curve X with an even degree model y'^ = f{x). Assume 
that X has even genus or that X{ky) ^ for all v] then Hypothesis 110.11 is satisfied, by 
Lemma riU.2[ The ^^-set A is the set of Weierstrass points. The group Z/2Z injects into 
E = (Z/2Z)^ggQ, and E"^ = 1 1^2- Since J c::^ J, exact sequence (IT^ is 

— > — — > E — > J\2] — > 0, 
2Z M > 

and its dual (HM is 

— > J[2] ^ A /i2 ^ 
where is the norm. Cohomology (see (fT6!) ) gives 

O^IC^H\k, J[2]) ^ H\k, ^^), 

where /C ^ fi2{k)/N{E'^ (k)). One can show (see |PS97t Theorem 11.3]) that the element 
of /C represented by —1 G H2{k) corresponds to the class ^ of the 2-covering Pic^y^, — J 
in H^{k, J[2]), where Pic^/^. is the Picard scheme component parametrizing line bundles of 
degree 1 on X. For each v, our assumption implies that Pic^/^ has a fc^-point, so maps to 
in H^{ky,J), so G im{Cy: J{ky)/2J{k^) — >■ H^{kv, J[2])). Since ^y generates kera^,, we 
have Wy = Ohj Definition [JOljii]). Also, UI^{k,fi2) = by Lemma EZH so Lemma [10116]© 
applies, and Corollary 110. 151 yields an exact sequence 

^ /C Sel2(J) ^ SeC/f,,,(J) ^ 0. 

Finally, since /C ~ ^2{k) / N [E^ [k)) , we have that /C = if A has a Galois-stable unordered 
partition into two sets of odd cardinality (a computable condition), and /C ^ H2{k) otherwise 
(cf. jPgQTl Theorem 13.2]). 

11. Computing true and fake Selmer groups 

Choose S and T as in Section [10.21 and compute L{n,S) as in Section [731 Because of 

Theorem 110. 9[ it remains to find an algorithm to test whether a given element of L{n,S) is 
in the local image imC„ for a given v. It is clear that this can be done in principle, but our 
goal here will be to describe a practical method, under an additional hypothesis: 

Hypothesis 11.1. The variety X is a genus-(7 curve with a /c^-point Xq (or more generally, 
a degree 1 divisor xq over ky), and either char/c^ = or charfc^, > g. 

We consider the non-archimedean and archimedean cases separately. 

11.1. Computing the local image at a non-archimedean place. Fix a non-archimedean 
place V of k. Let A' be a finite extension of ky, say of degree d, with valuation ring O, uni- 
formizer vr, and maximal ideal m. Let Lk '■= L ®fc K. We have a map X{K) — Z^{Xk) 
sending x to the class of the 0-cycle x — xq, and following this with Ck defines a continuous 
map 

CK-.XiK)-^ 



To define Ck on all of X{K) requires using several functions /i, . . . , with disjoint support, 
as in Remark I6.13[ By perturbing Xq in the smooth space X{ky) (if Xq is a point) or 
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perturbing each component of xq in the space of points over its field of definition (if xq is a 
divisor), we may assume that the fi can be evaluated at xq- 

We now explain how to compute a finite description of Ck- Choose a proper (9-scheme X 
with Xx — Xk- By the valuative criterion for properness, X{K) ~ X{0) ~ ^m X{0/tt"^). 

By Hensel's lemma, L^"" has finite index in L^, so L^/L^^K^ is a finite discrete set, so Ck 
is locally constant. Proceed as follows: 

• Start with m = 1. 

• On each remaining residue disk modulo vr'" in X{K), check whether any fi is such 

that fi{x)/fi{xo) is constant in -txwtt^', if not, break the residue disk into residue 
disks modulo 7r"^~^^, and apply recursion. 

Because the divisors of the fi are disjoint, eventually this algorithm will terminate, with a 
partition of X{K) into residue disks on which ck takes a known constant value. 
Next, the diagram 

T ^ 



X{K) " Z\Xk) > 



z\x,^ 



K/kv 



^Klk^ 



J xnUx 



commutes, so we can compute C on elements of Z^ik^) of the form tiK/k^ x — dxo- 
Lemma 11.2. 

(a) There are only finitely many extensions K/ ky with [K : k^] < g up to isomorphism, and 
we can list them all. 

(b) As K ranges through these field extensions, and x ranges over X{K), the images of 
^T^K/ky X — dxo generate Jik^). 

Proof. 

(a) If charfcj, = 0, see [PROlj . If charfc^, > 0, the characteristic assumption in Hypothe- 
sis [TLT] guarantees that each K is tamely ramified over k^, so K is obtained by adjoining 
a single rn"^ root of a uniformizer to a finite unramified extension of k^ . We can compute 
representatives for the set of possible uniformizers up to m}^ powers. 

(b) The Riemann-Roch theorem shows that every degree-0 divisor on X is linearly equivalent 
to -E — gxQ for some effective E G Div^X. Writing ii^ as a sum of closed points lets one 
express E — gxQ as a sum of 0-cycles of the form tix/ky x — dxo for various K of degree 
at most g. □ 

We can now compute im Cy as follows: 

(i) Compute all extensions K as in Lemma [11.2([al) . 

(ii) For each, compute the image of Ck, and apply N^/k^ to find the image of on 0-cycles 
of the form tix/ky x — dxQ. 

(iii) Compute the subgroup generated by all such images. 
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By Lemma [11 ■2[ the result equals imC, 



11.2. Computing the local image at an archimedean place. For archimedean v a 
similar method works, but instead of partitioning X[K) into residue classes, we partition 

it into connected components, because a continuous map to the discrete set L^/L^^k^ is 
constant on connected components, li K = C, then every point in X{K) has the same image 
under x h- )■ tTx/k^ x — dxo as Xq, which is 0. U K = M, then we compute f{x)/f{xo) for one 
point X in each connected component of X{K), perturbing x as necessary to ensure that / 
is regular and nonvanishing at x. 

11.3. Further comments on the computation of local images. 

Remark 11.3. To find different /'s that can be used to compute Ck, we need to move f3 
(and/or D in the fake case) within their linear equivalence classes. In the fake case, it 
is often more convenient to move D in practice, since in many applications f3 is the only 
effective divisor in its class. 

Remark 11.4. Sometimes we can compute Ck without moving /3, as we now explain. Suppose 
that 

• we have a true or fake descent setup, with a choice of /3, D, and /; 

• / can be evaluated at xq] where xq G X{K) or xq is a degree 1 divisor on X over K, 
for some local field K; 

• the supports of /3p for P G A are pairwise disjoint; and 

• the image of the diagonal Z/nZ — )■ (Z/nZ)'^ is contained in R. 

Given x G X{K), the hypothesis on the Pp implies that there is at most one P such that fp 
has a zero or pole at x. We can evaluate fqix — Xo) for all Q ^ P, and the missing component 
of Ck{x) can be recovered from the fact (Lemma 16. 16p that Ck{x) lies in the kernel of A^. 

Remark 11.5. Under the same hypotheses on f3, D, /, R as in Remark 111. 4[ we can evaluate 
C/ at arbitrary x G X{k), using Lemma 19.51 instead of Lemma 16.161 Similarly, we can 
evaluate C/,„. 

Remark 11.6. Here we describe an alternative method that, when it succeeds, computes imC„ 
much more quickly in practice. The method consists of two parts: computing an upper bound 
on # im Cy (or its exact value), and computing lower bounds on the group imC^,, and hoping 
that the sizes match. Suppose that A = J and (j) is multiplication-by-n on J. To compute 
an upper bound on #imC^: 

• First calculate the action of the decomposition group Gal{ky^s/kv) on A. 

• Using this, compute the exact sequence 

(24) ^ J[n]{k„) -> E^'iky) 4 R'^ik^) 

of finite groups. 

• From this, compute i^J[n]{ky). 

• Substitute this into the formula 

(25) ^;j^ = "^"-~''"'M^](^''^' 

where || \\y is the f-adic absolute value normalized so that ||a||t, = {O^ : aO^,)"^ for 
a & Ojj (this is a variant of |PS97l Proposition 12.10]). 
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• We obtain the bound # im < #J(A;t,)/?iJ(fc^), since C^, factors through J(/c^)/nJ(/c„). 

• If g: {kv) — >■ It^ {k^) is surjective, a condition that can be checked using (12^ . then 
(fT9l) shows that is injective and #imC^ = ^J{ky) /nJ{kv). 

To compute lower bounds on ini Cy : 

• Randomly select x G X(A;t,) ^ ^(/ci.) and compute their images under C„ hoping 
that they generate a group of the right size. (Calculate NK/k^{cK{x)) for x e X{K) 
also for finite extensions K of /c„ if it seems that the /c„-points are insufficient.) 

12. Genus-3 curves 

In this section we specialize to the case of a fake descent setup given by the bitangents of 
a smooth plane quartic. This is the non-hyperelliptic g = 3 case of Example I6.9l(livl) . Many 
of the results about smooth plane quartics we require were established already before 1900. 
See |Sall879l p. 223 onwards] for a survey. 

12.1. Bitangents of smooth plane quartics. Let be a field of characteristic not 2. Let 
X be a non-hyperelliptic genus-3 curve over k. The canonical map embeds X as a smooth 
quartic curve g{x, y, z) = in P^. Conversely, every smooth quartic curve in arises in this 
way. Let P^ be the dual projective space, with homogeneous coordinates u,v,w] its points 
correspond to lines in P^. 

Definition 12.1. A bitangent to Xg is a line / C P^^ such that the intersection l.X is 2(3i 
for some f3i G DivX^^. 

Given a bitangent /, the line bundle associated to /3; is an odd theta characteristic 
on Xg. The bitangents to Xg form a 28-element ^-set A in bijection with the ^-set <%dd of 
Section [STTl |GH04t p. 289]. Alternatively, we may view A as a finite etale subscheme of P^, 
and the collection {^i) as a line bundle on X x A. Then (2, A,^) is isomorphic to the 
fake descent setup in Example I6.9l1iv|l with g = 3. The isogeny 0: A —t- J of Section [63] is 
[2] : J ^ J. 

12.2. Syzygetic quadruples. 

Lemma 12.2. Let li, . . . ,1^ be bitangents. Then the following are equivalent: 

(i) The corresponding four odd theta characteristics sum to m ^f^[2]. 

(ii) The divisor Ai + ■ ■ ■ + A4 is linearly equivalent to 2 times a canonical divisor. 

(iii) The divisor Ai + ■ ■ ■ + Ph is an intersection Q.X for some (not necessarily irreducible) 
conic Q C P^. 

Proof. 

(i) <^==^ (ii): Considering degrees shows that the odd theta characteristics sum to in 
[2] if and only if they sum to cu®^ in PicX^. 

(iii) =^ (ii): Let / be any line in P^. Then Q ~ 2/ on P^, so Q.X ~ 21.X on X, and l.X 
is a canonical divisor. 

(ii) =^ (ni): Equivalently, we must show that r(P^, ^(2)) r(X, ^x(2)) is surjective. 
This is true, since the cokernel is contained in if^(P^, (^(—4 -I- 2)) = 0. □ 
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A 4-element set {/i, . . . ,U} satisfying the conditions of Lemma 112.21 is called a syzygetic 
quadruple. Let S C (^) be the set of syzygetic quadruples. This incidence structure (A, S) 
constructed above from bitangents is the same as that in Section for g = 3. In particular, 
its isomorphism type is independent of X (see Remark I5.6p . By Proposition 15.71 ^^S = 315. 

12.3. Spg(F2)-modules. If we chose a bijection between A and {1, . . . , 28}, then the image G 
of ^ — Aut A would be identified with a subgroup of the symmetric group 5*28, and changing 
the bijection would change the subgroup up to 5'28-conjugacy. 

Instead we will choose an isomorphism between (A, E) and a fixed incidence structure 
(A, S), so that G is identified with a subgroup of Aut(A, S), which by Proposition 15.41 is a 
specific copy of Spg(F2) in 5*28 • Changing this isomorphism changes G only up to Spg(F2)- 
conjugacy. This more refined information will be needed to deduce the action of G on J[2], 
E^, and . 

The following lemma constructs our fixed (A, S) directly from the group Spg(F2): 
Lemma 12.3. 

(a) The group Spg(F2) has a unique index-28 subgroup H , up to conjugacy. Let A be the 
g-set g/H. Identify A with {1, . . . , 28}. 

(b) There is a unique Spq{¥ 2) -invariant subset of (^) of size 315; call it S. 



Proof. Direct computation using Magma [Magma). □ 
Let r be the image of the map 



TX 



In F^, let 1, J, R, E be the F2-spans of {XligA 0; T, S, ('^), respectively, where we identify 
subsets of A with the sums of their elements in F^. 

Lemma 12.4. The Spg{¥2) -submodules of¥f^ are 



OclcJcRcEcFf, 

which have dimensions 0, 1, 7, 21, 27, 28, respectively. 

Proof. The given modules obviously are submodules. Direct computation using Magma es- 
tablishes that there are no others and that the dimensions are as stated. □ 

Corollary 12.5. Let X be a smooth plane quartic. Let A be its set of bitangents. Let 
S be its set of syzygetic quadruples. Construct E and R from the fake descent setup as 
in Section \6.3[ Then there is an isomorphism (A, S) ~ (A, S) of incidence structures, 
and any such isomorphism induces a homomorphism p: g ^ Spg(F2) and g-equivariant 
isomorphisms ^ E, i? ^ R, and J[2] ^ ker(E^ — ?■ R^), where g acts on the Spg(F2)- 
modules via p. 

Proof. The isomorphism (A, S) ^ (A, S) exists because of the uniqueness in Lemma 112.31 
The ^-action on A must respect S, so we get 

g Aut(A, S) ~ Aut(A, S) = Sp6(F2). 
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The induced isomorphism — > sends £" to E and i? to R because by Lemma [12 .41 there 
is at most one submodule of each dimension. By ( IT4|) . we have 

J[2] ~ ker (E^ ^ R"") ~ ker(E'' ^ R^). □ 

12.4. Computing bitangents and syzygetic quadruples. 

Lemma 12.6. Let k be a field for which arithmetic operations can be computed. Suppose 
that g{x,y,z) G k[x,y,z] is a degree-A homogeneous polynomial defining a smooth curve X 
m P2. 

(a) We can compute /S. as a subscheme in ¥\. 

(b) In the remaining parts, suppose that F is an explicit finite Galois extension of k over 
which A splits completely, and write A for A{F). If we choose a bisection A ^■ 
{1, . . . , 28}, then S can be determined as an explicit subset of (^^'■■■^^^^^ , 

(c) With notation as in (jb]), we can compute an isomorphism (A, S) — )■ (A,S). 

(d) If we have an explicit description of Gal{F/k) acting on F, then the image of the homo- 
morphism p\ Qk ^ Spg(F2) of Corollary \1 2. 5\ can be computed. 

Proof. 

(a) We describe A as a subscheme of by describing its intersection with each standard 
affine patch of P^. For example, to compute the part of A in the patch whose points 
correspond to lines /: ux + vy + wz = with w = 1, substitute the parametrization (s : 
t) I— (s : t : —us — vt) of the line into g{x, y, z), set the result equal to (aoS^ + aist + a2t^)^ 
for indeterminate Qq, Oi, 02, and eliminate Oq, cti, 02 to find the conditions on u, v, w for / 
to be a bitangent. 

(b) We use criterion (iii) in Lemma [12.21 Enumerate the 3-element subsets {/i,/2,^3} of A. 
For each, use linear algebra over F to determine if there is a conic Q in P2 such that 
Q.X > Pi^ + + /Jjg; if so, compute Q.X to check whether it equals + Pi^ + Pi.^ + [3i^ 
for some 1^ G A. Record all such {Zi, . . . , 

(c) Given (jbj), this is a matter of matching combinatorial data. A bijection A — )■ A' can 
be built one value at a time; we try all possibilities, checking as we go along that the 
distinguished 4-element subsets match so far. 

(d) We compute equations for the bitangents, and hence compute the action of Gal(F/A;) 
on A. Using we translate this into an action of Gai{F/k) on A. The image of 
GsX{F/k) Aut A is im p. □ 

12.5. Computing the discriminant of a ternary quartic form. The following is well- 
known. 

Lemma 12.7. Fix positive integers n and d. Let g{xo, . . . , Xn) G '^[xq, • • • , Xn] be a degree-d 
homogeneous polynomial with indeterminate coefficients ci,...,CAr, so N = {^'j^'^) . Then 
there is a polynomial D{ci, . . . , Cat) G Z[ci, . . . , Cat], called the discriminant, such that when- 
ever Ci, . . . , ctv are specialized to elements of a field k, the polynomial D vanishes if and only 
if the hypersurface g = inF^ fails to be smooth of dimension n — 1. Moreover, D is unique 
up to a sign. 

Sketch of proof. Let B = , and let X C P" x S be the closed subscheme defined hj g = 0, 
so X — 5 is the universal family of degree-rf hypersurfaces in P"-. Let S be the locus where 
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X ^ B fails to be smooth of dimension n — 1. Then S ~^ B is proper, so its image is a closed 
subscheme V C A^. On the other hand, analyzing the fibers of the other projection 5" — )■ P"" 
lets us show that S and V are integral (or empty) and lets us compute their dimensions. 
This eventually shows that V is a hypersurface (possibly empty), so V is cut out by a single 
equation, defined up to a unit of Z. □ 

We now restrict to the case n = 2 and d = 4, in which case D is a polynomial of 
degree 27, denoted hrig) in the notation of |Dix87] . We fix the sign by decreeing that 
i27{x^ + + Z^) > 0. 

Over a ring in which degg is invertible, the discriminant of g agrees, up to a unit, with the 
resultant R{g) of |f , |j, g (cf. |GKZ08l Chapter 13, §1]), for which an algorithm is given 
in [Sall876t §91]. Thus hiig) = cR{g) for some c G Z[l/2]^ independent of g. 

To determine the power of 2 in c, we compute R{g) for a single g G 7j2[x,y,z] for which 
g = is smooth over Z2 (e.g., take g = + y^z + z^y); for this g we must have cR{g) G Z2 . 
The sign of c can be determined as the sign of R{x^ + y'^ + z^). It turns out that c = 2~^^ 
(cf. |GKZ08t Chapter 13, Proposition 1.7] and |Demllt §5, Definition 4 and Exemple 3]). 

This algorithm was implemented by Christophe Ritzenthaler, and included by David Kohel 
in his Magma package Echidna |Koh] . We used this implementation (but negated the output 
to make the sign agree with our convention). 

Remark 12.8. Given a smooth plane quartic curve X over Q defined hj g = 0, we can choose 
g G Z[x,y,z] to minimize |J27(5')|. But l2j{—g) = —127(g), so the sign of hiig) for such a 
minimizer g is not uniquely determined by the curve X in Pq. 

12.6. Computing fake Selmer groups of smooth plane quartics. We apply the pro- 
cedure outlined in Section [TT] to compute Sel^]^j,(J) for the fake descent setup given in 
Section [12.11 under the assumption that Xk^ has a divisor of degree 1 for all w G fi^. For 
simplicity and practicality, we assume that k = Q. By multiplying the polynomial g{x, y, z) 
defining X in P^ by a positive integer, we may assume that g has coefficients in Z. We 
proceed with the following steps: 

(1) Determine L. 

(2) Determine the ring of integers Ol of L. 

(3) Determine a finite set S dVL^ containing the archimedean places, the places of residue 
characteristic 2, and the places v where the Tamagawa number c^(J) is even. 

(4) Determine L(2,5). 

(5) Determine the image G of ^ -> AutA as a subgroup of Spg(F2) up to Spg(F2)- 
conjugacy. 

(6) Choose a finite set T C Qt- For each v G T, 

(a) Determine the decomposition group as a subgroup of G up to G-conjugacy. 

(b) Determine imC„. 

(7) Compute S'^ = {6 e L{2^) : NL/k{S) = 1 G ^ and Res^ G imC^ for all v G T}. 

Sections I12.6.1f[12.6.7l elaborate on the implementation of the corresponding steps. 

Lemma [6.161 and Theorem I10.9( [a]) imply Sel^i.g(J) C S^. So the result of the calcula- 
tion is an upper bound for Sel^]^j,(J), which by Theorem I10.9lfb|) can be guaranteed to 
equal Sel5^]^g(J) by choosing T appropriately large. (But as explained in Remark llO.lll in 
practice we will often not choose T so large.) 
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12.6.1. Determine L. Our goal is to find a squarefree h{t) G k[t] of degree 28 sucli tliat 
A ~ SpecL witli L := k[t]/h{t). First compute A as a subscfieme of as in Lemma ri2.6l ([ai). 
Next, repeatedly choose a projection — P^ (i.e., perform a change of variables, and then 
eliminate a variable) until one is found that maps A to an etale scheme A' of degree 28 with 
oo ^ A'. Then A' is the zero locus in of the desired h{t) e k[t]. 

Let 6 be the image of t in L. 

12.6.2. Determine the ring of integers of L. Here our task is to find a Z-basis of Ol, with 
each basis element expressed as a polynomial in 6 of degree less than 28. This is a standard 
operation in algebraic number theory packages if L is a field. If L splits nontrivially as a 
product of fields, we just compute the integer rings of each constituent separately and piece 
the results together using the Chinese remainder theorem. 

From the denominators of the coefficients of h{x) we find m G Z such that m6 is an 
algebraic integer. The standard approach for determining Ol would then be to compute the 
integral closure of O := Z[m6] in L. But since 6 was obtained by projecting a degree 28 
subscheme of P^ onto P^, there are probably primes introduced into Disc O that do not divide 
Disc Ol- In practice these primes can easily be of size 10^°", so even finding them in Disc O 
may involve a challenging factorization. 

Here are two ways to circumvent this problem: 

(1) Compute the discriminant hrig) of the quartic form as in Section [12. 5[ and factor it. If 
p is a prime not dividing the integer 127(5'), then the 28 bitangents of X reduce to the 
28 distinct bitangents of the smooth plane quartic curve defined by g{x,y,z) mod p, so 
p \ Disc Ol. In other words, the set of prime factors of hrig) is an upper bound for the 
set of primes dividing DiscO^. Magma's routine MaximalOrder accepts this upper bound 
as part of the input to help it remove extraneous factors via a lazy factorization. 

(2) Use a different projection to find a second order O'. Then the order generated by O 
and O' is likely of small index in Ol, in which case computing its integral closure in L 
is much easier. 

Remark 12.9. It is advisable to compute an LLL-reduced basis for Ol and use that to 
represent elements of Ol and L. 

12.6.3. Determine the set S (Z Qk- Compute the integer 127(5') factor it. If p is a prime 
such that p \ 127(5), then X has good reduction at p, from which it follows that J has good 
reduction at p and Cp(J) = 1. Therefore we may take the set S of Proposition 19.21 to be the 
set of prime divisors of 127(5), together with 2 and 00. 

Remark 12.10. Often we can use a smaller S by computing a proper regular model of X 
over Zp and using |BLR90l §9.6, Theorem 1] to compute Cp{J). Magma has an implementation 
by Steve Donnelly that can compute regular models of plane curves in many cases; there 
is also a function that extracts the component group $; then Cp{J) = #<l>(Fp) is a divisor 
of 7^$, so this may let us prove that Cp{J) is odd, in which case p can be excluded from S. 

Here is a common special case in which no extra computation is required to exclude a 
prime: 

Remark 12.11. Suppose that an odd prime p appears with exponent 1 in the factorization 
of hvig)- Then Proj Zp[x, y, z]/ (5) is regular and its special fiber is an irreducible curve with 
multiplicity 1, with a single node. We deduce Cp(J) = 1, so we may exclude p from S. 
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12.6.4. Determine L (2, S) . Our goal here is to compute elements of whose images in L^/L^ ^ A; ^ 

form a basis for L{2,S). 

We first compute L{2,S). If we compute L{2,S') for some S' D S, we can recover its 
subgroup L{2,S) by performing linear algebra with the valuations in S' — S; thus we are 
free to enlarge S. If S is enlarged enough that we can verify that 01(0^^5) [2] = 0, then f[T7|) 
implies that L(2, S) = OlslOl%. 

Next, since A; = Q, we have C\{Os) = 0, so (IIH]) implies L{2^) = coker {O^/Of Ol g/Ol'^s). 
Thus we need only solve the following standard problems of algebraic number theory: 

(A) find S such that C\{Ol,sW] = 0, and 

(B) compute bases for /Of and 01^/01%. 

Current methods for solving problem (jX]) involve computing the whole class group C1(0l,5)- 
Doing this unconditionally requires computation up to the Minkowski constants of the 
fields Li with product L, which requires running time polynomial in DIscOl.; in the case 
where L is a degree 28 field, it is rare that Disc Ol is small enough to make this practical. 
On the other hand, if we are willing to assume the Generalized Riemann Hypothesis for 
the Li of large degree, we can handle many more instances. 

Problem ([B]) is less serious, once problem (jX]) has been solved. One can check whether 
an element of O^g is a square, by constructing the square root numerically to prove a 
positive answer and by reducing modulo primes to prove a negative answer. The Dirichlet 
5-unit theorem yields dim^^O^ g/Ofg = #5 in advance, so if generators are constructed 
conditionally, they can be verified without difficulty. 

Remark 12.12. Magma has a command to compute L{2,S) when k = Q. 

12.6.5. Choice of T ■ Choose a finite set of places T, while keeping Remark 110.111 in mind. 
If it is necessary to get a better upper bound S'j- on Sel"j,^g/fa^i^j,( J), we can enlarge T later. 

12.6.6. Determine the global and local Galois actions on A. We have two goals: 

(A) Describe the image G of the homomorphism p\ Q ^ Spg(F2) in Corollary 112.51 as a 
subgroup of Spg(F2) up to Spg(F2)-conjugacy. Since in Lemma I12.3([ai ) we fixed an 
embedding Spg(F2) )■ 5*28, the answer can be specified by giving explicit elements 
of 5*28 that generate one such representative G of its conjugacy class. 

(B) For each w G T, describe the decomposition group D^, as a subgroup of the G in ([A]) 
up to G-conjugacy. Each is to be specified by a list of elements of G C 5*28 that 
generate D^. 

If dXJ and dHJ are done, then R, J[2] with the actions of Q and Qk^ can be computed as 
submodules and subquotients of F^, as in Section [12.31 

Magma shows that there are 1397 conjugacy classes of subgroups in Spg(F2) to distinguish. 
Here are some methods that can be applied (with varying degree of success) towards deter- 
mining the image Gk of Qk Spg(F2) (up to Spg(F2)-conjugacy) for a field K: 

• Splitting field. If a splitting field of A over K is of small enough degree, then 
Lemma [l2.6[p] ) is practical. But in the worst case, the splitting degree is # Spg(F2) = 



1451520. 

Orbit sizes. Factoring h{x) over K determines the orbit sizes of Gk', this already cuts 
the number of possibilities from 1397 down to at most 107 (there are 107 conjugacy 
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classes with orbit size multiset {4, 8, 16}). Factoring h{x) over the fields obtained by 
adjoining one root of (one factor of) h{x) determines the orbit size multisets for the 
one-point stabilizers; these constrain Gk further. 
• Decomposition subgroups. If is a global field k, and we have computed decom- 
position subgroups Dy in Spg(F2) up to Spg(F2)-conjugacy for several v, then these 
constrain the possibilities for Gk- 

Next we discuss the practicality of these methods for special types of fields K: 

1. Finite fields. Here Gk is cyclic. Magma shows that for each cyclic subgroup of Spq(F2), 
either the orbit size multiset determines the conjugacy class uniquely, or the subgroup has 
size at most 6, in which case the splitting field method is practical. So Gk is determined 
easily. 

2. Archimedean local fields. The splitting field has degree at most 2, so use the splitting field 
method. 

3. Non-archimedean local fields. If X has good reduction, then we reduce to the case of a 
finite field. Otherwise, let q = p"^ he the size of the residue field (for = Q, e = 1); then 
we have normal subgroups P < J of Gk (wild inertia and inertia) such that Gk //is cyclic 
of some order /, and I/P is cyclic of order dividing g-^ — 1 and P is a p-group. U p > 7, 
then p \ #Spg(F2), so P = {1}, and Gk is metacyclic; there are only 214 conjugacy 
classes of metacyclic subgroups of Spg(F2), and the largest such subgroup has order 60, 
which is about the largest degree for which the splitting field method is easily practical. 
For K = Q2, Q3, Qs, Q7, the maximal size of is 2304, 432, 120, 60, respectively; if the 
splitting field method is impractical, we can eliminate possibilities by using the orbit size 
methods, and by using that the local Galois group must be contained in the global Galois 
group if the latter has been computed already. 

4. The global field Q. Determining the Galois group of a polynomial h{t) G Q[t] is a standard 
problem in computational number theory: see [Sta73[[DK00llGei03j . A recent implemen- 
tation by Glaus Fieker and Jiirgen Kliiners in Magma chooses a prime p, labels the roots 
of /i in a splitting field Kp/Qp by giving approximations to them, and computes the Ga- 
lois group over Q as a subgroup of the permutations of the labels; in fact, by choosing an 
unramified prime p, the computations can be done in finite extensions of ¥p instead of Qp. 
Once this is done for our h of degree 28, the splitting field method can then compute G 
in Spg(F2) up to Spg(F2)-conjugacy. 

An alternative to using the general-purpose implementation above is to use orbit sizes 
and decomposition subgroups to try to eliminate all possibilities except one. When this 
succeeds, which in practice seems to be almost always the case, it is often faster. 

Summary: In practice we can always achieve goal (jX]). Goal ([B]) may be more difficult to 
reach, but the methods presented above often succeed. From now on, we assume that both 
goals have been reached. 

12.6.7. Determining the local images. Given f G T, our goal is to compute elements of 
whose images in / L^'^k^ form a basis of imC^. We follow the approach in Section [TTl 

First let us explain how to compute the map Ck in Section [11.11 for any finite extension K 
of ky. Let {u0 : : wq) G A(L) be the generic point of A over k; we perturb Xq so that 
U9X + vgy + woz does not vanish at (points in the support of) Xq. Given P G X{K), choose a 
linear form UqX + VqU + WqZ G K[x, y, z] not vanishing at P or (points in the support of) Xq. 
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If P G X{K) does not lie on any bitangent, then evaluating the rational function 

uex + vey + wqz 
uqx + vqh + 1^02; 

at P and xq give elements of L^; their ratio mapped to L^/L^K^ is Ck{P)- If P does lie 
on a bitangent, then use Remark lll.4[ which applies since the /3; are disjoint. 

Now, to compute imC^,, attempt to use Remark 111.61 in which for = Qp, (j25l) becomes 

.26) JjK) _ [#^[2](fc.), iivy^2 

^ ' 2J{K) |8#J[2](fc,), ifv = 2. 

If the approach of Remark 111.61 fails, use the general approach of Section 111.11 or lll.2[ 

12.7. Comparing Sel^]^g(J) with Sel^(J). Let notation be as in Section [12. 6[ where we 
computed a group S'j- containing Sel^],.g(J), which Section [10.3I relates to SeP(J). 
We review here the ways in which S!j-, Sel^j.j,(J), and Sel^(J) can differ: 

(i) may be larger than Sel^]jj,(J) 

(ii) Sel^^g( J) may fail to be contained in a{H^{k, J[2])) (both are subgroups of H^{k, -E^)). 

(iii) If Sel|jJJ) C a{H\k,J[2])), then a induces a map Se\\j) Sel°^ke(>^) (see Theo- 
rem [TOITS]), but it may fail to be injective and/or surjective. 

And here are ways to detect or avoid these differences: 

(i) Theorem I lO.QK lbj) shows how to choose T to ensure that Sel^]jp(J) = Sr, in which case 



both equal the group S!j- sandwiched between them. But the amount of computation 
involved in implementing that strategy is probably prohibitive, so we may prefer to use 
the observation of Remark 110. 11[ 

(ii) Lemma [10.16l (lbl) shows that the containment Sel^]^p(J) C a{H^{k, J[2])) follows if 
m\k, P^) = 0, and Proposition E3] gives an upper bound on III^(/c, i?^) that is often 0. 
More precisely, this upper bound is for 1103 of the subgroup classes of Spg(F2). Even 
if we are unlucky enough to have G in the remaining 266 subgroup classes, there is hope 
since we find that there is a G-orbit in S of size at most 7, so the ideas of Appendix |A] 
are probably practical; and J[2] is reducible, so there are nontrivial isogenies available 
for descent computations. 

(iii) In order to estimate the kernels and cokernels of Sel^(J) — >■ SelJ^i^-g( J), we use Theo- 
rem 110.131 Assuming that we succeeded in computing global and local Galois groups 
as in Section 112. 6. 6[ we have for each G T an explicit description of 



>J[2 



{k) ,E''{k)^^R''{k) 



> J[2]{K) > E''{K) R'^iK,). 

Let k'^ be the map JC = keia — kera^ implicit in fl2^ . which can be identified with 

R^jk) R^{k,) 
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and hence computed. The map in (l22l) we are really interested in is the map 

K^: K, = kera — )■ M/„ := ■. . 

ker fl im 7„ 

We computed j^^Jik^jUik^ and # im C„; dividing gives the size of ker ~ 7^ (ker C„) = 
kera^ fl im7t,, so in some cases we may have sufficient information to deduce and 
piece together k = Yl^ i^v and its kernel and cokernel. Even if we can determine 
^cokerK, however, it is only an upper bound on # coker(Sel^( J) — )■ Sel5^i^g(J)) (see 
Theorem [Tons]). 

12.8. Descent on the curve. Let X be a smooth plane quartic over a global field k of 
characteristic not 2. The fake descent setup described in Section 112.11 can be used also to 
perform a descent on the curve as described in Section [9131 Let ug,vg,wo G L be as in 
Section [12. 6. 7[ and choose / to be {ugx + Vgy + Woz)/£ for some linear form £ G k[x, y, z\. 

To apply Remark 111.51 we need to find the c and r of Lemma 19.51 By interpolation, find 
a degree 14 form G z\ whose zero divisor on X is 'YIip^a Pp'i such a form is unique 

modulo g and up to scalar multiple. Thus there exists c E such that 

(27) NL[x^y^^]/k[x,y,z]{ugX + vgy + wgz) = cr^^x, y, zf (mod g{x, y, z)). 

Comparing coefficients lets us compute c. Then c and r := ri4/i^'^ are as in Lemma [9.51 

We can now evaluate Cf^^iQ) for any Q G X(fc„), by using /; in fact, it suffices to evaluate 
ugx + vey + wqz at any triple of homogeneous coordinates representing Q, since the value of 

1 on this triple will be in k^ . 

Lemma 12.13. Assume that the ug,vg,wg above are in Ol- Let S C Vtk he a finite set of 
places containing the archimedean places, the places of residue characteristic 2, the places of 
had reduction of the model g{x,y,z) = of X , and places lying under Oi-primes dividing 

the Oi-ideal {ug,vg,wg) . Then imCj C L(2,iS). 

Proof. Let f G fi^ \ S. Then Ly is a product of local fields, and we let be the product 
of their valuation subrings. Suppose that {x : y : z) E X{ky). Without loss of generality, 
x,y,z G Oy and {x,y,z)Ov = O^. The point {ug : vg : Wg) G P^(L) extends to a point 
in P^(Oi^^,). Given Q G A(/c^^„) = A(/cs), we can specialize ug to an element uq in the 
valuation ring of and define vq and Wq similarly; our hypothesis on {ug,Vg,Wg) implies 
that mm{v {uq),v{vq),v{wq)) = 0. On the reduction of X at v, the 28 bitangents are 
distinct, so the reduction of (a; : y : z) G X{ky) lies on at most one bitangent, so 

v{uqx + vqy + wqz) > 

for at most one Q. On the other hand, (|27|) and our hypothesis on {ug,Vg,Wg) imply that 

2 I f(c), so 



2 I v{NL,/kSugX + Vgy + Wgz)) = 




Combining the previous two sentences shows that 2 | v{uqx + vqy + wqz) for all Q, and 
hence uqx + vqy + wqz is a square in L ® ky^u- D 
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By breaking up as in Section we can compute Cf^y{X{ky)) for any v. (Note 

that in contrast to Section [11.11 we do not need to work with extensions of k^.) For a finite 
set T C we compute 

S'^ := {6 G 1(2^) : N{6) G cA;^^ ^j^^ ^ C/,„(X(A;^)) for all G T}, 

which contains Sel4]^p(X). In particular, if is empty, then X has no /c-rational points. 
On the other hand, the following may be useful in proving the existence of local points: 

Lemma 12.14. Let be a nonarchimedean local field with valuation ring and residue 
field ¥y of size at least 37. // X^^ is a smooth plane quartic, and Xjp^ is geometrically 
irreducible, then X{ky) is nonempty. 

Proof. Removing the singularities from Xr^ yields a smooth curve of genus g with at most 
6 — 2(7 punctures, for some g G {0, 1,2,3}. In all four cases, the Hasse-Weil bound implies 
the existence of a smooth Ft,-point. By Hensel's lemma, it lifts to an O^-point, which gives 
a ky-pomt. □ 

12.9. Examples. Denis Simon kindly supplied us with a list of smooth plane quartics with 
small integer coefficients and small discriminant. These serve as test cases for the methods 
outlined in Section 112.61 In the first three examples, we use fake descent to determine the 
structure of </(Q), which in the first two examples lets us determine X{Q). In the fourth 
example, we use descent on the curve to prove that -^(Q) = 0. 

12.9.1. A genus 3 curve with J(Q) ^ Z/51Z. Let X be the curve in Pq defined by 

x^y — x^y^ — — xy'^z + xz^ + y^z = 0. 

(This is isomorphic to the curve of smallest discriminant in Simon's list.) 

Steps 1 and 2. The algebra L = Q[t]/{h{t)) turns out to be a degree 28 number field 
over Q. It follows that Qq acts transitively on the bitangents. We compute Ol and find that 
DiscCi = 2^2 . 296 . 163^. 

Step 3. We find that = 4727 = 29 • 163. By Remark [nUl we may take S = {2, 00}. 
Step 4- The class group of Ol is generated by primes of norm below the Minkowski bound, 
which is 36 984 868, remarkably small for a degree-28 number field. We can prove uncondi- 
tionally that the class group of Ol is trivial, and we can find explicit generators of L(2,S). 

We find L{2,S) ~ (Z/2Z)i^ and L(2^) ~ (Z/2Z)i^ 

Step 5. By computing the Frobenius action at 3 and 5, we find that G is either the full 
group Spg(F2) or the unique index-36 subgroup up to conjugacy. The larger group acts 
doubly transitively on the bitangents, whereas the smaller does not. If we factor h(t) over L, 
we find factors of degrees 1, 12, 15, so G is the smaller group. With this information we can 
check that 

(28) > J[2](Q) > E^(Q) ^ i?^(Q) 

F2 

Step 6. Taking T = (i.e., doing no local computations with X) yields the upper bound 
^ (Z/2Z)^'^ on SelJ^]^-p( J). To obtain a better bound, we next try T = {2}; it will turn 
out that this suffices. 
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Step 6a. We check that h is irreducible over Q2, so D2 acts transitively on A. This, together 
with the general constraints on a decomposition subgroup at 2, leaves only two candidates 
for D2 up to conjugacy: a group G56 of order 56 and a group Gies of order 168. We 
can distinguish these by the number of points fixed by their one-point stabilizers: G^q leaves 
4 points fixed and Gies leaves 1 point fixed. We find that h has 4 roots in Q2(^), so D2 = G^q. 
Actually, the distinction is unimportant, because for either group we have 

(29) > J[2](Q2) > ^^(Q2) i?^(Q2) 

F2. 

Step 6b. From J[2](Q2) = and fl26l) . we deduce #im72 = 8. Embed Xq^ in Jq^ using 
Xo = (0 : : 1) G X(Q2); we find points in X(Q2) whose images under G2 generate a 
group of size 8. Thus the inequality 7^imC2 < 7^im72 is an equality; i.e., #imC2 = 8. By 
Lemma 110.41 and its proof, we obtain 

(30) W2^kera2^^^^c^Z/2Z, 

by m- 

Step 7. Given that we have explicit generators for L{2,S), we can compute the map 

^ ' ^ (L®Q2)x2Q2^- 
In Step 6b, we computed imC2, so we can compute S'j- for T = {2}. We find S'j- = 0. 
Thus Sel"^kc(^) = 0. 

By (EH]) and Corollary fTIU4l Sel^(J) is either or Z/2Z. We can decide which by 
computing kerK in Theorem OTOISI By ([30]), the map /C ^ 14^2 is (Q) / qE"^ (Q) 
-R^(Q2)/q'-E'^(Q2), which is an isomorphism, so k is injective; thus Sel^(J) = by Theo- 
rem [Mil 

Remark 12.15. The situation can be reinterpreted as follows: the kernel /C of the map 
a : H^iQ, J[2]) H^{Q, E^) has a non-trivial element 5, but its restriction 82 G H^{Q2, J[^]) 
is not in im72. (This is because 7^ ^2 G kera2, while im 72 Piker a2 = 0: see Step 6b above.) 
In classical language, 5 corresponds to a 2-covering of J that has no Q2-point, so 5 ^ Sel^(J). 

Proposition 12.16. If X is the curve 

x^y — x^y^ — x'^z'^ — xy^z + xz^ + y^z = 

m F^, then J(Q) = ([(0 : 1 : 0) - (0 : : 1)]) - Z/51Z and 

X{Q) = {(1 : 1 : 1), (0 : 1 : 0), (0 : : 1), (1 : : 0), (1 : 1 : 0), (1:0: 1)}. 

Proof. Since Sel\j) = 0, the group J(Q) is finite and of odd order. Reduction modulo 3 
injects J(Q)tors into ^(Fs), which, according to Magma, is of order 51. (We use JiF^,) to 
denote the group of Fs-points on the reduction.) On the other hand. Magma shows that 
[(0 : 1 : 0) - (0 : : 1)] is of exact order 51 in J(Q). Thus J(Q) ~ Z/51Z. 

Finally, we determine X{Q). The Abel-Jacobi map X — )■ J given by P 1— t- [P — (0 : 
: 1)] injects X(Q) into J(Q). Magma determines which points in J(Q) can be represented 
as [P — (0 : : 1)], and the result is as stated. □ 
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12.9.2. A positive rank example. Let X be the curve in Pq defined by 

x^y^ - xy^ - x^z - 2x^z^ + y'^z^ - xz^ + yz^ = 0. 

The group J(Q)tors injects into JiF^), and its odd part injects into J(F2) (the curve has good 
reduction at 2 and 3). We compute J (¥2) ^ Z/71Z and /(Fg) ~ Z/85Z, so J(Q)tors = 0. 
On the other hand, the divisor class 

G := [(0 : 1 : -1) + (0 : : 1) - 2(0 : 1 : 0)] 

is nonzero since X is not hypereUiptic. Thus rk J(Q) > 1. 

Steps 1 and 2. The algebra L turns out to be a degree 28 number field. We find that 
Disc Ol = 2^2. 4^6. 3476_ 

Step 3. We have hi = 41 ■ 347. By Remark [TMH we may take S = {2, 00}. 
Step 4- The Minkowski bound for Ol is 1008 340 641. The truly dedicated enthusiast could 
probably verify unconditionally that the class group of Ol is trivial. We verified this only 
conditionally on the Generalized Riemann Hypothesis for L. Subject to this, we find explicit 

generators of L{2,S) ~ (Z/2Z)i^ and L{2^) ~ {Z/2Zy\ 

Step 5. By computing the Frobenius action at 5 and 7, we find that G ~ Spg(F2). Thus 
J[2](Q) = E^(Q) = i?^(Q)=0. 

Step 6. It will turn out that taking T = {2} is enough to obtain the upper bound 5*12} — Z/2Z 
on Se\l^^{J). 

Step 6a, b. We check that h is irreducible over Q2, so D2 acts transitively on the bitangents. 
This leaves 6 possibilities for D2 up to Spg(F2)-conjugacy, but for all of them we have 
J[2](Q2) = ^^(Qs) = 0. Following Remark [nH we obtain #imC2 < #J(Q2)/2 J(Q2) = 8 
(see ( 126|) ). but we also find enough points in X(Q2) to show that # im C2 > 8, so # im C2 = 8. 
Step 7. We can compute the map 



explicitly, and we have imC2; from this we compute that S'j- = Z/2Z. 

Since i?^(Q) = 0, Corollary [TOU implies that Sel^{J) Self"^kc(^) is injective. Thus 

^M. ^ se\\j) ^ Sell^^iJ) cS'r = Z/2Z, 

so rk J(Q) < 1. Combining this with the earlier information yields J(Q) — Z. 
Proposition 12.17. Let X be the curve 

x^y"^ - xy^ - x^z - 2x^2^ + y'^z^ - xz^ + ^/^^ = 
in Pq. Assume the Generalized Riemann Hypothesis. Then J(Q) ^ Z and 
X{Q) = {(1:1: 0), (-1:0: 1), (0 : -1 : 1), (0:1: 0), 
(1:1:-1), (0:0:1), (1:0:0), (1:4 :-3)}. 

Proof. We already proved that J(Q) ^ Z. To determine X(Q) we use an explicit version of 
the method of Chabauty and Coleman over Q3 (see [MPlOj for a survey). 

We check that ^^(Fa) = 7, and that the set of 8 points in X(Q) listed above surjects 
onto ^(Fs), with Pq := {1 : 1 : 0) and Pi := (1 : 4 : —3) reducing to the same point. Since 
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rkJ(Q) = 1 and dim J = 3, there is a 2-dimensional subspace V C H'^(Xq^,Q^) such that 
JP' CO = for all P,P' e X{Q) and cu E V. Since [Pi — Pq] is nonzero in J(Q), it is of 
infinite order, so V = {oo : Jp^ oo = 0}. We compute this integral (to some 3-adic precision) 
for w in a basis for H^{Xq^, Q^) by evaluating the integral as a power series in a uniformizing 
parameter t at Pq! then linear algebra produces a basis for V. Explicitly, if we identify each 
u G H^{Xq,^, Q^) with a linear form ux + vy + wz, a basis for V is given by Ui corresponding 
to (21262 + 0(3i°))x - y and U2 corresponding to (1302 + 0(3i°))x - z. 

For each point of ^(Fs), we need to find the rational points in the corresponding residue 
class in ^(Qa). For each point Q G ^(Fa) other than the reduction of Pq (and Pi), the 
mod 3 reduction of one of ooi,uj2 is nonvanishing at Q, so by Proposition 6.3 in |Sto06] . there 
is at most one rational point reducing to Q, and we already know one. The rational points P 
in the residue class containing Pq and Pi satisfy loi = Jp^^ 002 = 0; these give two power 
series equations over Q3 to be solved for t G 3Z3. We calculate that each power series has 
three zeros in 3Z3, but the intersection is of size at most 2, so Pq and Pi are the only rational 
points in this residue class. □ 

12.9.3. A modular curve of level 13. Let Xspiit(13) (resp. -'^nonspiit(13)) be the modular curve 
of level 13 over Q corresponding to the normalizer of a split (resp. nonsplit) Cartan subgroup 
of SL2(Z/13Z). These are non-hyperelliptic curves of genus 3, and it turns out |Barl2a[ 
IBarl2bj that both are isomorphic to the smooth plane quartic curve 

(31) X: x^y + x^z - 2x^y^ - x^yz + xy^ - xy'^z + 2xyz'^ - xz'^ - 2y'^z^ + ?>yz^ = 0. 

This curve has at least the following 7 rational points. 

{(0:1: 0), (0:0: 1), (-1:0: 1), (1 : : 0), (1 : 1 : 0), (0 : 3 : 2), (1:0: 1)} 

We compute J(F3) ~ Z/91Z and ^(Fy) ~ Z/659Z. Since J(Q)tors injects into both groups, 
^(Q)tors = 0. This, with the fact that #X(Q) > 2, implies that rk J(Q) > 0. One can verify 
that the divisor classes 

[(0 : 1 : 0) - (1 : : 0)], [(0 : : 1) - (1 : : 0)], [(-1 : : 1) - (1 : : 0)] G J(Q) 

generate a group containing all differences of the points listed above. Furthermore, the image 
in J(F3) X J(¥^) X J(F43) is isomorphic to 

Z/(7 ■ 13 ■ 29 ■ 97)Z x Z/13Z x Z/13Z, 

so rk J(Q) > 3. 

We apply the procedure in Section [12.61 to compute an upper bound on rk J(Q). 

Steps 1 and 2. The algebra L is a degree 28 number field with DiscO^ = 2"^^ ■ 13^^. 
Step 3. We have 127 = 13^. The closed subscheme of P|^g defined by ([21]) is regular, and its 
special fiber is a geometrically integral curve of genus 0, so ci3(J) = 1. Therefore we can 
take S = {2, 00}. 

Step 4- The Minkowski bound for Ol is 8 158 071 456. The truly dedicated enthusiast could 
probably verify unconditionally that the class group of Ol is trivial. We verified this only 
conditionally on the Generalized Riemann Hypothesis for L. Subject to this, we find explicit 

generators of L{2,S) ^ (Z/2Z)^7 and L{2^) ~ (Z/2Z)i^ 
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Step 5. Since L is a field, G acts transitively on the bitangents. There are 18 subgroups 
of Spg(F2) up to conjugacy with that property. The Fieker-Kliiners implementation in Magma 
for finding Galois groups yields #G = 504. This determines G uniquely up to conjugacy. 
This information allows us to compute: 

(32) > J[2](Q) > ^^(Q) > i?^(Q) 

F|. 

Steps 6 and 7. It will turn out that taking T = {2} is enough to obtain the upper bound 
— ^/2Z on Sel^]jg(J). The fact that L has only one prime above 2 shows that D2 acts 
transitively. This together with the constraints on a decomposition group at 2 determines 
D2 uniquely up to conjugacy in Spg(F2). We obtain #-D2 = 56 and 

(33) > J[2](Q2) > ^^(Qa) > i2^(Q2) 

wi 

Following Remark HLBl we obtain #imC2 < #im72 = #J(Q2)/2J(Q2) = 2^ (see ([26])). 
Further computation shows that = (Z/2Z)^^ and that the homomorphism 

is injective. It follows that #S'j- < # im C2 < 2^. Thus # Sel^^ke('^) < 21 By Corollary [TOU 
and ([32D, this implies # Sel^( J) < 2^ so rk J(Q) < 5. 

We now present two approaches to improve this to rk J(Q) < 3. The first is to use the 
isomorphism End J ~ ^[(7 + Cf'^] of |Barl2b| Proposition 2.4] to obtain that rk J(Q) is a 
multiple of 3, which improves the bound to rk J(Q) < 3. The second is to follow Section ril.il 
to compute that #imC2 = 2, which can be used as follows. By the same argument as in 
the previous paragraph, #imC2 = 2 implies #Sel^j,g(J) < 2^ and #Sel^(J) < 2^. On the 
other hand, 3 < rk J(Q) < dim][r3 Sel^( J), so equality holds everywhere in this paragraph. In 
particular, if III(J) is the Shafarevich-Tate group of J, then III(J)[2] = 0. We have proved 

Proposition 12.18. Let X = Xspiit(13) ~ -^nonspiit(13) over Q. Assume the Generalized 
Riemann Hypothesis. Then J(Q) — 7? and III(J)[2] = 0. 

Remark 12.19. By fl33|) and Lemma 110.41 we have W2 = 0. In particular, we are in the 
situation of Corollary 110.151 

12.9.4. A genus 3 curve violating the local-to- global principle. The fake descent setup pre- 
sented in Section [12.11 allows us also to compute Sel{^^^{X) for a smooth plane quartic X. 

Proposition 12.20. Let X be the curve in Pq defined by 

A A O /1 

X + y + X yz + 2xyz — y z + z =0. 

Then X{M.) 7^ and X{Qp) ^ for all p, but if the Generalized Riemann Hypothesis holds, 
then X(Q) = 0. 
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Proof. We have hr = -2^ ■ 5^ ■ 1361 ■ 97103, so Lemma [mi implies X{Qp) ^ for p > 37. 
A further calculation using Hensel's lemma shows that X{Qp) ^ for p < 37 too, and that 
X(M) ^ 0. 

To prove X{Q) = 0, we apply Section [HIH] with S = {oo, 2, 5, 1361, 97103}. It is straight- 
forward to find {u0,vg,W0) satisfying the hypotheses of Lemma [12.131 for S. We find that 
Disc(CL) = 23°-5^°-1361'^-971036 and that the Minkowski bound exceeds 10^^, so determining 
C1(Ol,s) unconditionally is out of the question. Conditional on the Generalized Riemann Hy- 
pothesis for L, which we assume from now on, we find that CI{Ol,s) = Zi/2Z and we also find 

Cl,5/Cl,5- This leads to explicit generators of L(2,5) ~ (Z/2Z)^i and L{2,S) ~ {Z/2Zf^. 
We compute c = -1. For T = {2, 1361}, we find Si^ = 0, so X{Q) = 0. □ 



Appendix A. Determining the </)-Selmer group directly 

We can modify our approach so that it computes Sel'^(J) directly, instead of comput- 
ing Sel"j.^j;/fa^i.j,( J) and hoping to control the difference. 

The fundamental idea behind a true descent setup is to replace the Galois module J[0] 
whose cohomology we want by a permutation module (Z/nZ)^ whose cohomology we can 
compute. The discrepancies between Se\^j.^^/i^]^^{J) and Sel'^( J) come from the non-injectivity 

of (Z/nZ)'^ — !■ J[(f)]. In this section we deal with the non-injectivity by finding another 
permutation module (Z/raZ)'^ that surjects onto the kernel. 

A.l. Correspondences. A correspondence A A' between finite ^-sets is a ^-homo- 
morphism Z^ — Z"^'. Given a ^-module M and A •■■->■ A', we define homomorphisms 
T* : M'^ — > and r* : — )■ as follows. Restricting the composition pairing 

Homz(Z'^',M) X Homz(Z^,Z'^') -> Homz(Z^,M) 

by setting the second argument to r yields a ^-homomorphism that with the identifications 
of Remark 13.31 becomes r* : M'^ — )■ . Applying this construction to the Z-dual of r 
yields t^. 

Example A.l. Suppose that X is a nice /c- variety. If we apply the previous remark to the 
etale group scheme M such that M{ks) is the ^fc-niodule DivX^, then M^{k) = Div(X x A), 
and we obtain : Div(X x A) — )■ Div(X x A'). Similarly we obtain r* : k{X x A)^ — )■ 
k{X X AY. 

Lemma A. 2. Let M be a finite Q-module such that nM = 0. 

(a) There exists a finite Q-set A with a surjection (Z/nZ)'^ M. 

(b) There exists a finite Q-set A with an injection M > /i^ (here we assume char A; \n). 

Proof. For ([a]), take A = M: the identity M ^ M induces Z^^ -» M, which factors through 
(Z/nZ)^ since nM = 0. Applying (jaj) to := Romz{M,k^) and applying Romz{-,k^) 
yields ©. □ 
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Lemma A. 3. Each of the four homomorphisms 

Homz(Z^,Z^') Hom2((Z/nZ)^, (Z/nZ)^') 

Homz(Z^,Z^') Homz((Z/nZ)^', (Z/nZ)^) 

Hom^(Z^,Z^') ^ Hom^(/i^/if ) 
Homz(Z^,Z^') ^ Hom^(/if 

zs surjective with kernel nY{om.i{Z^ ,Z^') (in the last two we assume char /c f raj. 

Proof. The statements do not involve the ^-action, so each reduces to an easy statement 
about abehan groups. □ 

A. 2. Determining the Selmer group. Set := for a true descent setup, and 
:= G^/ fin for a fake descent setup. 
Recall that R = ker(a;^: E -» Fix a finite etale scheme A' = SpecL' with a 

surjection (Z/nZ)^ -» R (one such choice is A' = R). By definition of R, we have an exact 
sequence 

(34) (Z/nZ)^' — > E^ J[^] — ^ 
and its dual 

(35) ^ A[<P] ^E^^ /if 
in which the image of the last map is R"^ . 

Remark A. 4. Define Q and q' by the exact sequence 

(36) ^ i?'' — ^ /if ^ g ^ 0. 

liQ{k) = q'{fin{L')) and m^(fc,/if ) = (the latter holds if n is prime, by Lemma [8l2|) . then 
in^(/c,i?^) = 0, so the first assumption in Corollary 110.151 is satisfied. This gives a simple 
way of showing that UI^{k, i?^) vanishes, but the criterion can be weaker than that coming 
from Section |8l 

By Lemma [A. 3 1 the composition 

(37) (Z/nZ)^' ^ R--^ E^ (Z/nZ)^ 

is r* for some correspondence A ■ ■ ■ ■>■ A'. We use r* to denote any of several homomorphisms 
induced by r; the context will make the meaning clear. In the fake case, r* : /i^ — )■ /i^ kills 
the diagonal /in, because taking duals in fl37|) shows that r* factors through = /i^//i„. 

Thus T, : Gf induces r, : ^ Gf in both cases. 
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Let U be the image of (r*,n): — x G^. The last map in ( 135|) is induced by 
: fin ~^ f^n 5 so we have a commutative diagram with exact rows and columns 







(r*,n) 



(3^ 



> A[(P] > —A U > 

pr2 

.0, 



>E 



V 



9 











in which ker prg is identified as i?^ by the snake lemma. Taking cohomology, we obtain 



(39) 



H\k,A[cl>\) ^H\k,Gt) 



PI'2 



E^{k) — >{Gtm 



H\k,E^ 



H\k,G^). 



Lemma A. 5. There is a finite Stale k-scheme A" and a correspondence A' ■ ■ A" such 
that 

A A' A" 

t" 

is exact. There is another correspondence A ■ ■ - ^ A" such that t' o r = nr" . Then 



t/ = ker(G^' X Gt 



Proof. Lemma IA.2l1 b|) applied to the cokernel of yields A" and r'. By Lemma IA.3t r' o r 
is n times some t". Direct computation shows that U is contained in the kernel. To see the 
other inclusion, let be in the kernel. Let A G G^{ks) be such that A" = i, and let 

(' = i'/niX). Then C = ^'"/r.(A") = r/nH) = 1, so C' e /if . Also, 

^ ran ^ <{n ^ _ ran _ 

rinW {nT"UX) r:'(A«) Ti'{i) ' 
which implies that C' = niO for some C e f^t Then {£',£) = (r,(CA), ((A)") eU. □ 
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Corollary A. 6. Keeping the notation from Lemma \A.5[ we have 

U{k) = e L'^ X : r,(£) = ry:{i) = rHe)]. 

In this paragraph, suppose that we are in the fake case. The map r* : /i^ — )■ /i^' factors 
through = fi^/fXn, so it kills the diagonal image of Let t: Z — )■ be the diagonal 
embedding; the previous sentence shows that (r o i)^: yu„ — )■ fi^ is trivial. By Lemma [A. 3 1 
T o L = nO for some correspondence 6. The image of a G /c^ under 6^ : — in each 
component of {L')^ is a fixed power of a. 

Lemma A. 7. 

(a) In the true case, G^{k) is mapped by A to L^" C and by {j^.n) to 

(40) {(r,(£),r):£GL><}Cf/(fc). 

(b) In the fake case, G^{k) is mapped by A G^^^ to L^'^k^ C and by (r*,n) to 

(41) {{n{i)d,{a),ta) ■.ieL'',aek''} CU{k). 

Proof. The true case is immediate from the definitions, so assume that we are in the fake 
case. We have an exact sequence 



^ 



;t X G„ A GA ^ 



with maps induced by ^ i— )■ (£, £~") and (£, a) i— ?■ £a^/" (the ra*^ root is well-defined modulo /i„). 
Taking cohomology shows that j induces a surjection x k^ — t- G^{k). Following j 
by G^ A G^ yields (£, a) H- £"a, whose image on /c-points is L^^k^ . Following j by 
— (r^) ^ ^ ^ ^.^^^^ ^ (r,(£)^,(a), Ta), whose image on A:-points is V. □ 



Remark A. 8. The definition of j in the proof of Lemma FA.TIfbl) shows that in fj^Tj) . it suffices 
to let a run over a set of representatives of k^ /k^". 

Define 1/ := im (G^,{k) U{k)), so is given by or dH]). 



Lemma A. 9. Suppose that we have a true (respectively, fake) descent setup (n, A,^). 
Choose P as in Definition \ 6.2\ (respectively, /3 and D as in Definition 6.7). Then r*(/3) 
(respectively, r^,(/3) — 0^:{D) ) is a principal divisor on A x A'. 



Proof. In the true case, the composition 

(Z/nZ)^' A (Z/nZ)^ — 



J[0] C Pic A, 



is by and it sends a basis element P' to the class of the divisor t*(/3)|xx{p'}- 
In the fake case, we use the following diagram: 



(42) 



Z 



A' 



(r%r) 



Z^ X Z 



((nP, 1) : P e A) 



(Z/nZ)^' 



(Z/nZ)^, 



dcg 



)■ Pic Ao 
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Here the middle vertical map sends ^pCLpP (where ap G Z reduces to ap G Z/nZ) to 

^^pOpP, ^'^"^ The map {(3,—D) sends (^apP,6) to the class of XI'^-p/^p ^ ^-^> so 

(nP, 1) goes to the class of n/3p — D, which is trivial by the definitions of (3 and D. Both 

paths from Z^' to ^(.^p^^^pg^) send a basis element P' to (^pTp/^pP, ^^^^'"^ j , where rp/,p 

is the coefficient of P' in r (P) G Z^'. Both paths from (Z/nZ)^ . to PicX, send Pi - P2 
to the class of Pp^ — Pp^. Thus f H2|) commutes. The composition along the bottom row is 
zero, so the composition along the top row is zero, which is the desired result. □ 



Lemma [A. 9 1 shows that there is a function r = (rp/)p/gA' G k{X x A')^ such that 

^. ^ ^ I T^:{/3), in the true case, 

I T^,{(3) — 9^{D) in the fake case. 

Recall from Definitions 16.21 and 16.71 the function / G k{X x A)^ satisfying 



div(/) 



?7,/3, in the true case, 

n(3 — D in the fake case. 



Lemma A.IO. We have T,{f) = r" (mod (LY)- If y ^ 3^°(Xs°°'i), ^/^^^ n{[y,f3]) = r{y) 
(resp., n([?/,/3]z)) = r{y)). 

Proof. Since div(r^,(/)) = nT^:{f3) = div(r"), the congruence holds. In the true case. 



r,([y,/3]) = [y,r,(/3)] = [|/,div(r)]=r(y) 
In the fake case, define [y, /3]p) using H and /i as in ([9]); then 



[y,n{P~L,H)] _ [y,ni(3)-9,{nH)] _ [y, div(r ■ g,(/i))] _ 



o.my) 



o.my) 



□ 



In the following diagram with exact rows, the first, second, and fourth rows are as in ([5]) 
or ffTTj) . except that the first is a pushout by J[n] -» A[(j)\. The third and fourth rows are 
the same as in (1551) . The two maps from x to U coincide by Lemma fA.lOi Thus the 
diagram below commutes: 



(43) 




-^0 



J[n] > X ^ 2° > 







>P 
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Applying cohomology to the first, third and fourth rows and using Lemma rA.7l 1b|). we obtain 
the following diagram with exact rows: 



(44) 



(t)A{k) 



(rJ) 

, U{k) 



H\k,A[<f>]) 



V 



H\k,A[<j)]) >H\k,G^) 



-^H\k,E'') 



We write H :- 



U{k) 
V 



and : H Hy, where is the local analogue of H. 



Lemma A.ll. m\k,G^) = 0. 

Proof. In the true case, H^{k,G^) = (see the end of Section [3]). In the fake case, taking 



cohomology of 



p„ -> ^ G^, ^ 



yields an injection H^(k,G^) H'^{k,jJn), which restricts to an injection Ul^^k^G^) 
III^(/c,/i„). But III^(A;,/i„) = by the local-global property for the Brauer group. □ 

Proposition A. 12. Assume Hypothesis \10.1[ Then the injection H H^{k., A[(j)\) in the 
third row of ( l44l) identifies 

{heH: py{h) e (r, /)(Z°(X|°°'^)) for all places v}. 

with Sel'^(J). 

Proof. Hypothesis 110.11 shows that the image of J{ky)/(f)A(ky) in {ky , A[(j)\) equals the 
image of Z^{Xf^°'^), which in (jH]) for ky maps to in H^{ky,G^). Thus the image of 

Sel'^(J) C H\k,A[(j)]) in H\k,G^) lies in m\ky,G^), which is by Lemma |AII1 so 
Sel'^(J) C if by (HID. For HeH, the element py{h) is in the image of J{ky) / (t)A{ky) (or 
ZO(A:f°°'^) as above) if and only if it is in the image of (r, /)(ZO(X|°°^)), by dB]). □ 

We now describe the fibers of the map pr'g in (jH]). This will help us obtain a computable 
description of Sel'^(J): see Proposition lA. 151 below. 
Recall the exact sequence (cf. Remark IA.4P 



A' 1\ m 



(45) — > — > ■ 

Lemma A. 13. Let I E and let ^ be its image in H^{k, E"^) 
(a) If ^ lifts to {k A[(j)\) , then T^,{i) is an n*^ power in V . 
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(b) Conversely, suppose that T^{i) is an n^^ power in V , say T^{i) = m". Let A G be such 
that A" = e. Then: 

1. The element w := q'{T^,{\)/u) E Q is Q-invariant, 

2. Let Z := {C e : g'(C) = w}. Then {Cu,i) G U{k) if and only if C e Z . 

3. The set of elements of H^{k, A[(f)\) mapping to ^ is the image of {{(u,£) : ( & Z} 
under U{k) H^{k, A[(t)\). 

4. Two such pairs {Cu,i) and {('u,i) have the same image in H^{k,A[(j)]) if and only if 
CVCer.(E^(A;)). 

(c) In particular, if fin{L') surjects onto Q{k), then ^ lifts to H^{k, A[(f)]) if and only if T^{i) 
is an n^^ power in L' . 

Proof. In (!39|) . the image of pr^^(£) under U{k) — )■ H^{k, equals the set of hfts 

ofe 

(a) If ^ lifts, then there is a pair G U{k). By Lemma lA.51 r*(£) = m". 

(b) 1. Note that t^,{\)/u G /i^ , since 

^r,(A)V_ r,(A") _ r,(£) 

For a eg, 



u I u"- w 



''w _ V(r,(A)/^) _ , rr,{\) \ _ ,( r_\ 
w q'{niX)/u) Hr.(A)/ 

since q' o r* is trivial and u is ^-invariant. 

2. By part ([a]), the elements of pr^^(£) C have the form {Cu,i) with suitable 
C G fin{L')- By definition of f/, the condition on ( is that there exists A G such 
that r*(A) = (u and A" = ^. Equivalently, writing A = (X, there exists ( G fin{Ls) 
such that T^,(C) = Cn/r*(A). By f H5|) . T^{iin{,Ls)) = ker(g'), so this in turn is equivalent 
to q'iC) = q'{T,{X)/u) = w. 

3. This follows from 2. and the first sentence of this proof. 

4. In fl5^ . the intersection of ker pr2 with the kernel of U (k) — H^{k, A[(j)]) is (r^,, ?t,)(£'^(A;)) 
r,(E^(fc)) X {1}. 

(c) This follows from part (jb]). □ 

Remark A. 14. We can compute w G by working over a finite field. Let w be a finite 

place of k such that the characteristic of its residue field F„ does not divide n and such that 
£ is a unit at v. The formula in Lemma [A.13lfb| L. applied over F^, to the mod v reductions 
of £ and u, computes an element of Q(¥y) that is the image in Q(¥y) of the desired w. Since 
the reduction map Q{k) — )■ Q(¥y) is injective, we can recover w in Q{k). 

Proposition IA.121 involves an infinite group H. Imposing the condition that elements are 
unramified at all places outside a finite set S lets us replace if by a finite subgroup Hs. This 
will reduce the determination of Sel'^(J) to a finite computation. Let H^{k, A[(l)])s be the 
group of classes unramified outside S, as in Section 17.11 

Proposition A. 15. Assume Hypothesis \1U.1\ Let S be a finite set of places of k containing 
the set of places in Proposition \9.^ and the places at which E"^ is ramified. Let Hg be 

the preimage in H = U{k)/V of L{n,S) C L^/L^^k^ under the map pr'g in f l44p . Then 
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the injection H in the third row of (jH]) identifies the subgroup Hg with 

H^{k, A[(j)])s n im{H H^{k, A[(f)])), and identifies 

(46) [heHs-.pMe (r, f) {Z^X'^;")) for all v G S] 

with Sel*(J). 

Proof. Let w ^ 5 be a place of k. Since E"^ is unramified at f, we have i?^(/c^^„) = E^{ks), 
so the first map in 

is surjective. This shows that for ^ G i/^(A;, A[</)]), ^ is unramified outside 5 if and only 
if a{C,) is unramified outside S. On the other hand, Proposition 17.21 shows that equals 

the set oi h E H whose image pT2{h) in L^/L^"^k^ is unramified outside S. By (jH]), the 
previous two sentences yield the first identification. Combining this with Proposition I9.2([al) 
and the last sentence of the proof of Proposition IA.12I yields the second identification. □ 

We now sketch an algorithm for computing Sel'^(J), using the explicit description given in 

Proposition lA. 15] First compute L{n,S). Lemma [A. 131 lets us compute its inverse image 
under the map pr'g in (144|) . To perform the computations required by Lemma [A. 131 we need 
to be able to evaluate r* : — )■ L'^ and extract n^^ roots in L'; the remaining computations 
use only finite Galois modules like i?^, /i^ , or Q, so they are not difficult. 

Similarly, for each v G S, first compute / L^"-k^ , and use Lemma [A. 131 (over k^) to 
obtain a description of H^. The map — )■ is induced by the inclusion U{k) U{ky), 
so it too is easily described. Next, assuming that we can evaluate r and / on Z^{Xf°° ), 
we can determine the image of J(fc^,) in H^. Using all this, the second identification in 
Proposition lA. 151 lets us compute Sel'^(J). 

We summarize this discussion as follows. 

Theorem A. 16. Given a true or fake descent setup with associated isogeny (p: A ^ J, we 
can compute the Selmer group Sel''^(J) if we can do the following: 

• Compute in the algebras L and L' and their completions ( this includes the ability to 
take n*'* roots). 

• Determine a set S of places of k as in Proposition \A.15[ 

• Compute k{n,S) and L{n,S). 

• Evaluate r* on and for v G S, and on finite residue fields. 

• Evaluate f and r on (^|°° ) for v & S. 

Example A. 17. Consider the case of 2-descent on Jacobians of non-hyperelliptic genus-3 
curves X, as in Section [121 For generic X, the smallest usable set A' is the set of syzygetic 
quadruples, which has size 315. We have not had the need to implement the approach of 
this appendix on such examples, but it is likely that this could be done if required. 

A. 3. Determining the Selmer group in special situations. In some cases, the compu- 
tation of Sel''''( J) as described in Section lA. 21 can be simplified. In particular, in the following 
proposition, the set S is potentially smaller than that required in Proposition IA.15I 
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Proposition A. 18. In the situation of Section lA.B, let S be a set of places of k containing 
the set of places in Proposition \9.2[ Assume that the map [k') — >■ R^{k') is surjective for 
all field extensions k' of k and that the map q' : fin{L') — ^ Q{k) is surjective. Then 

Sel'^(J) ~ {5 = [£] G L{^) : r*(£) G L""" and 6^ G imC^ for all v G S}. 

Proof. Since E'^(k) R^(k) is surjective, the map H^{k, A[(f)]) A H^(k, E"^) is injective. So 

the map pr2 in (144|) identifies H with a subgroup of L'^ / L^"-k^ , and similarly identifies Hy 

with a subgroup of /L^"'k^ , for each v. Also E^ {k^^u) — ^ {k^,u) is surjective for each w , 
so the proof of Proposition IA.15I shows that Hs is the subgroup of elements of H unramified 
outside S. Since fin{L') — ^ Q{k) is surjective, Lemma lA.13([c] l yields 

(47) Hs ^ m G L(^) : r,(0 G L'""}. 

In dSD, a = pr'a o(r, /), so (r, /) (ZO(Xf°°'^)) = imC^. Substituting this and (HH) into (HSj) 
completes the proof. □ 

Remark A. 19. In contrast with Theorem I A. 161 Proposition IA.181 lets us determine Sel'^(J) 
without evaluating r^, on L„ and without evaluating (or even constructing) r. 

Remark A. 20. The surjectivity assumptions in Proposition IA.181 can be checked by a finite 
computation. This is clear for the statements over k, since they involve only the /c-points 
of some finite Galois modules. To check surjectivity of E"^ {k') — ?■ R^{k') for all extension 
fields k' of /c, let P be the (finite) Galois group over k of the splitting field of i?^; then 
the action of Qk' on E'^ (and therefore also i?^) factors through a subgroup P' < P. The 
surjectivity of E'^{k') — > R"^ {k') is determined by P', so it suffices to check it for each P'; in 
fact, we need only consider one P' in each conjugacy class of subgroups. 

Remark A. 21. Suppose that n is prime, and that the surjectivity assumptions in Proposi- 
tionOSlhold. Then m^{k, R^) = by Remark|Xl and = Q for all v by Lemma [1031©, 
and /C = by its second definition (preceding (1221) ). So by Lemma riU.16l(rb|l and Corol- 
lary 110. 15[ we actually have 

Sel^J) SeC,/f,,,(J). 

The advantage of computing SeP^( J) using Proposition lA.lSl instead of computing ^Q^t^^c/iakdJ) 
using Theorem 110.9 Ifjbl) is that the former requires local computations at only the places in S 
instead of the places in the potentially much larger set T of Theorem I10.9lfjbl) . This im- 
provement is possible because of the additional condition r*(£) G L'^": Proposition IA.18] 

says that Sel'^(J) ~ n {[£] G L{r^S) : r,(£) G L'^"}, which by Lemma EUljci) equals 
Ss n a{H^{k, v4[0])) under the assumptions made. In other words, enlarging 5 to a T large 
enough that Sj- = Sel^^^^^^g^^^^^J) has the effect of intersecting Ss with a{H^{k, A[(f)])). 

Example A. 22. We consider 3-descent on an elliptic curve J, as in [SS04] . Let A = 
J[3] - {0}, and let (3 be the graph of the map A Div° Js sending P to (P) - (O). This 
defines a true descent setup, for which y4[0] = J[3] and L is an etale algebra of degree 8. 
Fix a Weierstrass equation for J; then let A' be the set of eight lines in passing through 
three of the points in A, together with the four vertical lines passing through two of them 
and the origin of J. Let the correspondence r be given by incidence. A finite computation 
as in Remark IA.20I shows that the maps fisiL') — Q{k) and fi-siL) — > R'^i^k) are surjective 
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over any field. So Proposition lA. 181 gives us a way to determine Sel^(J), if we can compute 
L{3,S). 



The approadi described here and in Section IA.2I lias advantages and disadvantages com- 
pared to computing Sel"j,yp/£^]^(,( J) as in Section [TTl One obvious advantage is that it computes 
the Selmer group directly. Also, as in Remark IA.2H it requires local computations at only 
the places in S instead of the places in a potentially much larger set T. So whenever this 
direct approach is feasible (as in the example above), one should use it. 

On the other hand, the direct approach requires not only information on (5-)class and 
unit groups of L, but also a presentation of L', the map : ^ L'^ , and possibly the 
function r, which is defined over L'. 

A. 4. Passing from a true or fake Selmer group to the actual Selmer group. Recall 
the exact sequence 

ker K ^ Sel*( J) ^ SeC,/,,ke(^) na{H\k, A[<p])) ^ coker k. 
from Theorem 110.131 Assuming that we have computed Se[^j.^^^f^^^^,{J), we can determine the 
order of Sel'^(J) if we can 

• find the order of ker k; 

• for any given ^ G Se\'^,nc/iiikc{J) check if ^ e a{H\k, A[(j)])); 

• and if so, find its image in coker k. 

In this subsection, we will explain why this seems no easier than computing Sel'^( J) directly 
using the approach of Section IA.2I 
Lemma IA.13I implies the following. 

Corollary A. 23. If we can evaluate the map explicitly on and if we can extract n*'' 
roots in L' , then we can determine whether any given element in the image of in H^{k, E"^) 
lies in a [H^ {k , A[(f)])) . 

This takes care of the second point in the list above. 

For the other two points, we need to find the groups and the map k: K. ^ Ylv 
The group /C = By{k)/qE^{k) can be found by a finite computation, using the inclusion 
R^{k) fin{L') arising from (!36|) to represent elements of R^{k). For the finitely many v 
for which the proof of Corollary 110.61 does not guarantee = 0, we use the following to 
compute Wv- 

Lemma A. 24. Fix v. 

(a) The map 

ker a ^ kera,, ~ {k^) / qE'' {k^) 
can he described explicitly as follows. Given [z] G kerC^ C J{k^) / (pAik^) , represented by 
some z G Z^^XfJ"^), the image ^^viXz]) is represented by ( E R^{kjj) C yU„(L^) defined as 
follows: 

In the true case, f{zQ) = for some i E ; set ( := r{z)/T^,{i) . 

In the fake case, f{zo) = P^a for some ^ G and a E k^ ; set ( := r{z)/ {T^:{i)9^{a)) . 

(b) Assume Hupothesis \ll.l[ If we know i^(^J{ky)/(j)A{ky)^ and we can compute the functions 

f and r on 2^°(X|°°'^) and r* on , then we can compute Wy in the course of the 
computation ofimC^ as in Remark \ll.b\ as follows: 
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1. Search for points on X over finite extensions of ky until a 0-cycle xq of degree 1 on Xk^ 
is found. 

2. Randomly generate elements z := iix/kS'^) ~ dxQ G as in Remark \11.6\ 
let J he the subgroup of J{ky) / (pA^k^) they generate so far, compute I := Cv{J) C 

L^m^'k^, and compute G := 7^(ker(C^| j)) C [k^) / qE^ {k^) , until j^I ■ j^G = 

4^{J{K)/<i>A{K)). 

3. When equality occurs, / = im a and - {R''{ky)/qE^{ky))/G. 
Proof. 

(a) In the true case, Ct,([2]) = means that f{z) = f for some i E . Let be the local 
analogue of V. Dividing {r{z),f{z)) e U{ky) by (r*(£),^") G K, (cf. Lemma \A77\) yields 
(C, 1) G U{kv), so Corollary IA.6I implies ( G fin{L'). In the fake case, divide instead by 
(r*(£)^^,(a), £"a) G Vy. Lemma rA.13l (lbl)2. applied with i = 1, u = 1, X = 1, and hence 
w = l, yields C e ker(g'|^„(i')) = R'^ik,) (see m)- 

(b) We have = # J < #(J(A;^)/M(A;^)) with equality if and only if = J{ky)/(j)A{ky) 
When equality occurs, / = imC„ and G = 7t,(kerC^), and Definition 110. 3[p]) yields 
Wy-{R''{ky)/qE''{ky))/G. □ 

Remark A. 25. By computing ^J' = -^G as the algorithm in Lemma PV.24lfjbl) progresses, 
we can detect when J' = J{k.J) / (j)A{ky). This stopping rule can help make our computation 
more efficient. 

Once we know as a quotient of R"^ [ky) for all v for which might be nonzero, the 
map k: K, ^Yiv ^'"^ ^i^^ /C = R^ {k) / qE"^ {k) , is induced by the maps R^{k) -)■ R"^ {k^) and 
hence is computable. In particular, we can find the size of ker k, which takes care of the first 
point in our list. 

The following lemma deals with the last point. 



Lemma A. 26. Under the assumptions in Corollary \A.2!^ and Lemma A . 24^^ , given an 



element^ G Sel^^.^^ J) Ha {H^{k, A[(f)])) , represented by some explicit i G , we can find 
the image of ^ in coker/t. 

Proof. Use Lemma [A. 241 (and the sentence preceding it) to compute for all v. Compute k 
as in the sentences preceding Lemma IA.26I Our task is to compute the image of ^ under 
the snake map implied by fl23|l . To do this, we do a parallel diagram chase in the more 
computation-friendly diagram 

> R'^ik) > U{k) — — > 

(48) 

^llR'^iky) ,Y[uiky)^l[L 



(with exact rows from (!39|) ). which maps to (123|) . 

Use Lemma rA.13l to compute u such that {u,i) G U{k), i.e., such that t^{£) = u". For 
the places v for which = 0, set := 1 E -R^(/c^). For the finitely many remaining v, we 

have = Cy{[zy]) for some Zy G Z''(X|°° ) found during the local image computation; then 
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f{zy) = i in / L^'^k^ . Dividing {u,i) G Uik^) by {r^z^), f{zy)) and then by an element 
of as in Lemma [A .71 yields an element {C,^-, 1) G U{k^,) with the same image as {u,i) in the 
group H^{ky, A[(f)])/ im7t, in the corresponding position of (123|) . By exactness of the second 
row of (148|) . we have G i?^(/c^). Then G H-^^l^f) niaps to an element of H 
in (123|) . which represents the image of ^ in cokerK. □ 

We conclude that in order to find (the order of) Sel'^(J) from Sel"j,^e/fa^i^g( J), we need to be 
able to lift a given £ G to {u, i) G U{k) (or show that such a lift does not exist), and to 
evaluate r and r* locally at the places with potentially nontrivial Wy. But if we can do all 
this, then we can also compute Sel'^(J) directly as described in Theorem I A. 161 
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